HP-UX PHSS_30641 : HP-UX Running Apache, Remote Denial of Service (DoS) (HPSBUX01019 SSRT4717 rev.3)

s700800 11.04 Virtualvault 4.7 OWS update : Two potential security vulnerabilities have been identified in OpenSSL by NISCC 224012/1 and 224012/2. The Common Vulnerabilities and Exposures project has referenced them as the following CAN-2004-0079, and CAN-2004-0112. The CERT summary is TA04-078A...

CVE-2004-1756

BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers...

CVE-2004-1765

CVE-2004-1765 describes an off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x when SecFilterScanPost is enabled, allowing remote attackers to execute arbitrary code via crafted POST requests. The OpenVAS and Nessus/OpenVAS-derived feeds corroborate a remote overflow con...

CVE-2004-1759

Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service CPU consumption via arbitrary packets to TCP port 14247, as demonstrated using port scanning...

CVE-2004-1767

The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules LKM, possibly involving the modload function...

CVE-2004-1755

The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges...

CVE-2004-1763

Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 build 91 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long project name...

CVE-2004-1761

The CVE-2004-1761 entry concerns Ethereal (0.8.13–0.10.2) and a denial-of-service via a malformed color filter file that can trigger a segmentation fault. Public records in the connected documents confirm affected software and versions, and Red Hat advisories RHSA-2004:136/137 reference Ethereal ...

CVE-2004-1768

Symantec Brightmail AntiSpam 6.0.1 (before patch 132) is affected by a denial-of-service in the Spamhunter and Language ID character converters when processing messages using ISO-8859-10. The converters crash due to an unrecognized character set. Affected component: character converters in Spamhu...

CVE-2004-1759

Cisco voice products running the IBM Director Agent on IBM servers prior to OS 2000.2.6 are affected by CVE-2004-1759. The issue allows remote attackers to cause a denial of service (CPU consumption) by sending arbitrary packets to TCP port 14247, demonstrated via port scanning. The provided docu...

CVE-2004-1769

CVE-2004-1769 affects cPanel 9.1.0 build 34 and earlier (including 8.x). The vulnerability allows remote code execution through the resetpass feature by passing a crafted value for the user parameter to the resetpass endpoint, enabling arbitrary command execution on the server. Exploit details ap...

CVE-2004-1770

CVE-2004-1770 affects the login page of cPanel 9.1.0 and possibly earlier . The issue arises from improper handling of the user parameter , allowing remote attackers to execute arbitrary code via shell metacharacters. The vulnerability is described as remote code execution with high impact (netwo...

CVE-2004-1762

Technical details for CVE-2004-1762 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates as more information may emerge.

CVE-2004-1764

HP-UX CDE library libDtSvc on HP-UX 11.00, 11.04, 11.11, and 11.22 contains a local buffer overflow that allows a local user to gain root privileges via unknown vectors. The vulnerability affects the CDE/libDtSvc component and is referenced across multiple sources (CVE-2004-1764, HP Security Bull...

CVE-2004-1765

Off-by-one buffer overflow in ModSecurity modsecurity 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests...

CVE-2004-1764

Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors...

CVE-2004-1758

BEA WebLogic Server/Express (versions 8.1 up to SP2, 7.0 up to SP4, 6.1 up to SP6) may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, enabling local users to gain privileges. Root cause: credentials stored in plaintext within config.xml...

CVE-2004-1766

The CVE refers to NetScreen-Security Manager prior to Feature Pack 1 communicating with devices using ScreenOS 5.0 without encryption, allowing remote attackers to obtain sensitive information via sniffing. The available documents state the vulnerability and its impact (information disclosure) bu...

CVE-2004-1767

The Solaris kernel (versions 2.6, 7, 8, and 9) contains a local privilege escalation via a directory traversal in the vfs_getvfssw function. Unprivileged users can load their own kernel modules by crafting mount or sysfs system calls, potentially elevating privileges. Several reputable sources (S...

CVE-2004-1763

HAHTsite Scenario Server 5.1 Patch 06 (build 91) is affected by a buffer overflow in hsrun.exe. The issue allows remote attackers to crash the service and potentially execute arbitrary code via a long project name, with a CVSS v2 base score of 10.0 (HIGH) and network attack vector. The connected ...