CVE-2004-2092

CVE-2004-2092 affects eTrust InoculateIT for Linux 6.0. The issue is insecure permissions on multiple files/directories, including the application’s registry and tmp directories, enabling local users to delete, modify, or inspect sensitive information. Underlying cause: improper access controls o...

CVE-2004-2078

Red-M Red-Alert 2.7.5 with software 3.1 build 24 is affected. A remote attacker can trigger a denial of service (reboot and loss of logged events) by sending a long request to TCP port 80, potentially causing a buffer overflow. No explicit exploitation details or mitigations are provided in the s...

CVE-2004-2084

JShop E-Commerce Server is affected by CVE-2004-2084 due to an XSS in search.php. The root cause is unsanitized input from the xSearch parameter, allowing remote attackers to inject arbitrary script/HTML via a crafted search URL (e.g., search.php?xSearch=...). Exploitation details are discussed i...

CVE-2004-2093

Buffer overflow in the open_socket_out function of rsync’s socket.c affects rsync 2.5.7 and earlier. A long RSYNC_PROXY environment variable can allow a local user to crash the process and potentially execute arbitrary code. Since rsync is not setuid, the impact is limited to privileges already a...

CVE-2004-2083

Summary: Opera Web Browser 7.0–7.23 is affected by a file-download extension spoofing flaw. When a malicious site provides a downloadable file, the filename may embed a CLSID that makes the file appear as a trusted type, tricking users into executing it. This can lead to arbitrary code execution ...

Fedora Core 2 : mailman-2.1.5-10.fc2 (2005-241)

A cross-site scripting XSS flaw in the driver script of mailman prior to version 2.1.5 could allow remote attackers to execute scripts as other web users. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2004-1177 to this issue. Users of mailman should upda...

RHEL 3 : glibc (RHSA-2005:256)

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...

RHEL 3 : rsh (RHSA-2005:074)

Updated rsh packages that fix various bugs and a theoretical security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team The rsh package contains a set of programs that allow users to run commands on remote machines, login to...

RHEL 3 : openssh (RHSA-2005:106)

Updated openssh packages that fix a potential security vulnerability and various other bugs are now available for Red Hat Enterprise Linux 3. This update has been rated as having low security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol...

Low: Red Hat Security Advisory: glibc security update

Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. It was discovered that the use of LDDEBUG...

Low: Red Hat Security Advisory: ia32el security update

An updated ia32el package that fixes several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The ia32el package contains IA-32 Execution Layer platform which allows emulation of IA-32 binaries on IA-64. A flaw was found in the...

CVE-2004-2070

CVE-2004-2070 affects the Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181). Local users can execute arbitrary commands by opening the AClient tray icon and using the View Log File option. This vulnerability is explicitly described as different from CVE-2005-1590. No remediation detai...

CVE-2004-1964

The CVE-2004-1964 entry describes a Cross-site Scripting (XSS) vulnerability in Network Query Tool (NQT) 1.6, specifically in nqt.php where the portNum parameter can be abused to inject arbitrary web script or HTML. Affected component: Network Query Tool (NQT) 1.6; vulnerability type: XSS; root c...

CVE-2004-1872

CVE-2004-1872 affects WebCT Campus Edition 4.1.1.5 and is a Cross-site Scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via the @import URL function in a CSS style tag. The NVD CVSS v2 base score is 4.3 (MEDIUM) with network access, no authentication, and partia...

CVE-2004-2047

The CVE-2004-2047 vulnerability affects EasyWeb FileManager 1.0 RC-1 for PostNuke. A directory traversal flaw in the pathext parameter allows an attacker to read arbitrary files on the server, as demonstrated by examples like ../../file. The issue is documented across multiple sources (NVD/Nessus...

CVE-2004-2038

CVE-2004-2038 concerns a cross-site scripting (XSS) vulnerability in Land Down Under (LDU) prior to version 700. The issue allows remote attackers to inject arbitrary web script or HTML via a BBCode img tag in one of three PHP files: functions.php , header.php , or auth.inc.php . The provided doc...

CVE-2004-1983

CVE-2004-1983 involves the arch_get_unmapped_area function in mmap.c within the PaX patches for the Linux kernel 2.6. When ASLR is enabled, it allows local users to trigger a Denial of Service via an infinite loop. Connected sources (Gentoo GLSA 200407-02 and related advisories) confirm the issue...

CVE-2004-1826

CVE-2004-1826 affects Mambo Open Source 4.5 stable 1.0.3 and earlier, where index.php is vulnerable to SQL injection via the id parameter. The vulnerability arises from improper input handling in the application, enabling remote attackers to craft SQL payloads and potentially influence database q...

CVE-2004-1905

Panda ActiveScan 5.0 is affected through ascontrol.dll; the issue enables remote DoS by calling SetSitesFile, causing a crash. No additional exploitation details or fixes are provided in the available documents.

CVE-2004-2067

CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...