CVE-2004-0637

Oracle Database Server versions 8.1.7.4 through 9.2.0.4 are affected by a privilege-escalation vulnerability in the publicly accessible ctxsys.driload package. An authenticated user can invoke ctxsys.driload to execute arbitrary SQL statements with DBA privileges, enabling actions such as creatin...

CVE-2004-0369

The CVE-2004-0369 entry describes a buffer overflow in the Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall 7.0–8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5. The underlying flaw allows remote attackers to execute arbitrary code via a crafted I...

CVE-2004-0641

The CVE-2004-0641 issue affects Thomson SpeedTouch 510 ADSL Router (firmware GV8BAA3.270, and possibly earlier). The vulnerability arises from a predictable TCP Initial Sequence Number (ISN) generator, enabling remote attackers to spoof or hijack TCP connections. Exploitation details are describe...

CVE-2004-0534

CVE-2004-0534 is a documented XSS in Business Objects InfoView 5.1.4–5.1.8 / WebIntelligence 2.7.0–2.7.4. The root cause is incomplete server‑side validation for the document name during upload, allowing arbitrary script/HTML via the filename. Impact: remote attacker can inject script, potentiall...

CVE-2004-1086

Technical details about CVE-2004-1086 are not publicly available in the provided connected documents; no specific affected product versions beyond Mac OS X 10.3.6 are disclosed. Monitor for updates.

CVE-2004-0824

CVE-2004-0824 affects Mac OS X PPPDialer (versions 10.2.8–10.3.5). The issue is a local, non-privileged attacker could exploit a symlink in PPPDialer log files to overwrite system files, potentially impacting integrity. cvss2 base score 2.1 (Low), with local access required and no authentication....

CVE-2004-1085

Human Interface Toolbox HIToolBox for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode...

CVE-2004-1089

CVE-2004-1089 affects Apple Mac OS X 10.3.6 Server when using Kerberos authentication with Cyrus IMAP. The vulnerability, as described in the initial document, allows local users to access mailboxes of other users, indicating an information disclosure / mailbox access issue arising from the Cyrus...

BELL-CVE-2004-0812 CVE-2004-0812 does not affect BellSoft software

Bulletin has no description...

CVE-2004-1005

Multiple buffer overflows in Midnight Commander mc 4.5.55 and earlier allow remote attackers to have an unknown impact...

CVE-2004-0390

SCO OpenServer 5.0.5–5.0.7 exposes an authentication gap: it supports Xauthority style access control only when logging in via scologin, which can allow an unauthorized user to gain access to an X session through other X login methods. The vulnerability is described in CVE-2004-0390 and has a hig...

DEBIAN-CVE-2004-1092

Midnight commander mc 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory...

CVE-2004-1175

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters...

CVE-2004-0533

CVE-2004-0533 describes a vulnerability in Business Objects WebIntelligence 2.7.0–2.7.4 where client-side access controls allow an authenticated user to bypass restrictions and delete arbitrary server documents via a crafted InfoView delete request. The root cause is the lack of server-side enfor...

[SECURITY] [DSA 707-1] New mysql packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 707-1 [email protected] http://www.debian.org/security/ Martin Schulze April 13th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1060

CVE-2004-1060 enables a denial-of-service via forged ICMP PMTU-discovery packets that degrade TCP throughput. Connected advisories show affected BIG-IP products and data-plane components; vulnerable versions include BIG-IP LTM/AAM/AFM/etc. for 10.x–11.x releases (e.g., 11.0.0–11.6.0, 10.0.0–10.2....

CVE-2004-0791

CVE-2004-0791 covers a denial-of-service scenario where multiple TCP/IP and ICMP implementations can be disrupted by a blind throughput-reduction attack using spoofed Source Quench packets. The CVE is discussed across connected advisories; notably, F5 David advisories show that for BIG-IP product...

CVE-2004-0790

Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service reset TCP connections via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks;...

MS05-019: Vulnerabilities in TCP/IP Could Allow Remote Code Execution (893066) (uncredentialed check)

The remote host runs a version of Windows that has a flaw in its TCP/IP stack. The flaw may allow an attacker to execute arbitrary code with SYSTEM privileges on the remote host or to perform a denial of service attack against the remote host. Proof of concept code is available to perform a denia...

RHEL 2.1 / 3 : tetex (RHSA-2005:354)

Updated tetex packages that fix several integer overflows are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as...