CVE-2004-2289

CVE-2004-2289 is the Windows XP Desktop.ini/ShellClassInfo variant that leads to arbitrary code execution via a .ShellClassInfo CLSID pointing to an executable. Connected docs show a related Windows Shell remote-code-execution vulnerability (CVE-2006-0012) in Windows Explorer triggered by COM obj...

CVE-2004-2292

CVE-2004-2292 affects Alt-N MDaemon 7.0.1: a buffer overflow in the IMAP server triggered by a long STATUS command allows remote attackers to cause a denial of service (application crash). The available documents confirm the vulnerable component (IMAP STATUS handling) and the impact (DoS); no exp...

CVE-2004-2287

The CVE-2004-2287 entry describes a directory traversal in explorer.php of DSM Light Web File Browser 2.0, enabling remote read of arbitrary files via .. in the wdir parameter. Affected component: explorer.php in DSM Light Web File Browser 2.0. Root cause: improper handling of path traversal allo...

Solaris 10 (sparc) : 118822-30

SunOS 5.10: kernel Patch. Date this patch was last updated by Sun : Feb/23/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

FreeBSD : isc-dhcpd -- format string vulnerabilities (ccd325d2-fa08-11d9-bc08-0001020eed82)

The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary code with the permissions of the DHCP programs, typically root for the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

HP-UX PHNE_32606 : s700_800 11.23 cumulative ARPA Transport patch

s700800 11.23 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP. This vulnerability could be remotely exploited by an unauthorized user to cause a Denial of ServiceDo...

CVE-2004-2281

Technical details about CVE-2004-2281 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2004-2273

efFingerD 0.2.12 allows remote attackers to cause a denial of service daemon crash via a packet with a single byte, which triggers a "Wrong protocol or connection state" error...

CVE-2004-2259

Vulnerability CVE-2004-2259 affects vsftpd before 1.2.2. Under heavy load, a SIGCHLD signal during malloc/free (non-reentrant) can cause the FTP daemon to crash, producing a denial of service. Multiple connected sources confirm a signal-handling bug where unsafe operations in signal handlers coul...

CVE-2004-2275

The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...

CVE-2004-2267

The CVE-2004-2267 entry describes a Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier. The issue allows remote attackers to inject arbitrary HTML or web script via the album name. Affected product/versions: Ansel 2.1 and earlier. Root cause: unsanitized album name input enabling s...

CVE-2004-2273

CVE-2004-2273 affects efFingerD 0.2.12. A remote attacker can trigger a denial of service (daemon crash) by sending a packet consisting of a single byte, which leads to a “Wrong protocol or connection state” error. The available connected sources (RH Red Hat advisory, CVE records, NVD entry, CVE ...

CVE-2004-2269

The CVE-2004-2269 entry concerns a stack-based buffer overflow in pads.c of Passive Asset Detection System (Pads). The vulnerability could allow local users to execute arbitrary code via a long report file name argument. Note that Pads is not normally installed setuid, which may affect exploitabi...

CVE-2004-2265

UUDeview 0.5.20 and earlier insecurely handles temporary files during decoding in the UUDeview code path (uulib/uunconc.c), enabling local users to overwrite arbitrary files via a symlink/temporary filename issue, as used in nzbget before 0.3.0 and potentially other products. The vulnerability st...

CVE-2004-2263

CVE-2004-2263 describes a SQL injection vulnerability in the valid function of the PlaySMS project (fr_left.php) up to version 0.7, exploitable by tampering with the vc2 cookie to modify SQL statements. The CVSS base score is 7.5 (HIGH) with network access, low attack complexity, and no authentic...

CVE-2004-2276

CVE-2004-2276 : F-Secure Anti-Virus 5.41/5.42 (Windows), Client Security 5.50/5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux do not properly detect certain viruses inside PKZip archives, allowing viruses such as Sober.D and Sober.G to bypass initial detection. Affected products incl...

CVE-2004-2268

PimenGest2 before 1.1.1 is affected: remote attackers can obtain the database password via debug information in rowLatex.inc.php. Root cause is leakage of sensitive credentials through debug data. Impact is partial confidentiality loss of the database credentials. No exploit details or specific m...

CVE-2004-2260

Opera Browser 7.23 and other versions before 7.50 are affected by an address-bar spoofing weakness. The root cause is a JavaScript-based onUnload/unOnload handling during page redirects, which can cause the address bar to display a spoofed domain and mislead users. This vulnerability could enable...

CVE-2004-2264

GNU less versions 358–382 contain a format-string bug in the open_altfile function (filename.c) that may allow local users to cause a denial of service or possibly execute arbitrary code via the LESSOPEN environment variable. The PT-2004-3159 advisory notes this is not a vulnerability unless priv...

CVE-2004-2272

EFingerD 0.2.12 is affected by a buffer overflow in the sockFinger_DataArrival function, allowing a remote attacker to cause a denial of service (daemon crash) by sending a long finger command. The description comes from CVE-2004-2272 records; exploitation details or in-the-wild applicability are...