8091 matches found
CVE-2004-2068
Vulnerability summary (CVE-2004-2068) : The leafnode NNTP server’s fetchnews program (versions 1.9.47 and earlier) can be induced to hang a process by processing an empty NNTP news article with missing mandatory headers, enabling a remote DoS. Real-world references in the connected documents indi...
CVE-2004-2069
OpenSSH CVE-2004-2069 affects sshd (OpenSSH 3.6.1p2, 3.7.1p2 and possibly other versions) when privilege separation is enabled. The issue is that the non-privileged process is not properly signaled after a session ends once LoginGraceTime has been exceeded, leaving the connection open and enablin...
Low: Red Hat Security Advisory: nasm security update
An updated nasm package that fixes multiple security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM...
CVE-2004-1307
CVE-2004-1307 describes a heap-based buffer overflow in libtiff 3.6.1 triggered by a TIFF file using the STRIPOFFSETS flag with many strips, due to an overflow in TIFFFetchStripThing in tif_dirread.c. The vulnerability could allow remote code execution as a result of processing crafted TIFF files...
RHEL 4 : PHP (RHSA-2005:406)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:406 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP processes IFF and JP...
I-Mall Commerce - 'i-mall.cgi' Remote Command Execution
I-Mall explo Spawn bash style Shell with webserver uid Greetz z, spax, foxtwo, Zone-H This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $shiz; my @results; my $probe; my @U; $U1 = "/i-mall/i-mall.cgi?p=|"; sub intro sleep 1; ; sub...
I-Mall Commerce (i-mall.cgi) Remote Command Execution Exploit
Exploit for cgi platform in category web applications ============================================================= I-Mall Commerce i-mall.cgi Remote Command Execution Exploit ============================================================= I-Mall explo Spawn bash style Shell with webserver uid Gree...
CVE-2004-1778
CVE-2004-1778 affects Skype on Linux (versions 0.92.0.12 and 1.0.0.1; possibly others). The root cause is that the installer creates the directory /usr/share/skype/lang with world-writable permissions, enabling local users to modify language files. This could enable social engineering or other lo...
CVE-2004-1777
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service application crash via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114...
CVE-2004-1777
CVE-2004-1777 describes a range-check error in Skype for Windows prior to 0.98.0.28 that can be triggered by excessively long command line arguments or a long callto:// URL, leading to a denial of service (application crash). The issue affects Skype for Windows versions before 0.98.0.28 and is di...
CVE-2005-0228
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1388. Reason: This candidate is a duplicate of CVE-2004-1388. Notes: All CVE users should reference CVE-2004-1388 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
glibc, nscd security update
CentOS Errata and Security Advisory CESA-2005:261-01 Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by...
RHEL 2.1 : glibc (RHSA-2005:261)
Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. Flaws in the catchsegv and glibcbug scrip...
php security update
CentOS Errata and Security Advisory CESA-2005:405 Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache...
Low: Red Hat Security Advisory: glibc security update
Updated glibc packages that address several bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The GNU libc packages known as glibc contain the standard C libraries used by applications. Flaws in the catchsegv and glibcbug scrip...
Debian DSA-715-1 : cvs - several vulnerabilities
Several problems have been discovered in the CVS server, which serves the popular Concurrent Versions System. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2004-1342 Maks Polunin and Alberto Garcia discovered independently that using the pserver access...
CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method...
CVE-2004-1488
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code...
CVE-2004-1343
CVE-2004-1343 affects CVS 1.12 and earlier on Debian GNU/Linux; the issue occurs when cvs-repouids lacks a mapping for the current repository, allowing remote attackers to crash the CVS server (DoS). Debian security advisories DSA-715-1 describe fixes: for woody, CVS 1.11.1p1debian-10; for sid, C...
