CVE-2004-1720

The 1 address.html and possibly 2 calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web log...

CVE-2004-1721

CVE-2004-1721 affects Merak Mail Server 5.2.7, where the (1) function.php or (2) function.view.php scripts allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000. This is a PHP source disclosure/information exposure vulnerability, enabling an attacker to obtain...

CVE-2004-1750

RealVNC 4.0 and earlier allows remote attackers to cause a denial of service crash via a large number of connections to port 5900...

CVE-2004-1704

WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory...

CVE-2004-1716

Cross-site scripting XSS vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the 1 IRC Server or 2 AIM ID fields in the user profile...

CVE-2004-1736

CVE-2004-1736 affects Cacti 0.8.5a. The issue allows remote attackers to obtain the installation path via HTTP requests to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and potentially other PHP files, causing information disclosure of the installed framework. The root cause is e...

CVE-2004-1706

The CVE-2004-1706 entry concerns the U.S. Robotics USR808054 wireless access point. The issue is triggered by an HTTP GET request with a long version string, allowing remote attackers to cause a denial of service (device crash) and potentially execute arbitrary code. The connected records confirm...

CVE-2004-1710

The CVE-2004-1710 entry describes a remote command execution vulnerability in page.cgi, exploitable by sending shell metacharacters via the url parameter. The available sources do not specify affected products, versions, root cause specifics beyond the described command-injection vector, or concr...

CVE-2004-1748

NtRegmon (a Windows registry monitoring tool) is affected; versions before 6.12 are vulnerable. The root cause is invalid pointers to hook functions (e.g., ZwSetQueryValue) while NtRegmon is running, leading to a local denial of service (crash). The provided documents do not include exploitation ...

CVE-2004-1750

RealVNC 4.0 and earlier is affected; remote attackers can cause a denial of service by establishing a large number of connections to port 5900. The available documents do not provide exploit details or remediation. No further specifics on affected versions beyond 4.0 and earlier, or mitigation in...

CVE-2004-0838

Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive...

CVE-2004-0838

CVE-2004-0838 affects Lexar Safe Guard for JumpDrive Secure 1.0. The issue is that the password is stored insecurely in memory using XOR encryption, allowing a local user to read the password directly from the device and access the password-protected area. The NVD metrics indicate a local attack ...

CVE-2004-0481

The CVE-2004-0481 issue affects the Solaris KCMS package, specifically the kcms_configure script, whose logging to KCS_ClogFile can be manipulated via a symlink to corrupt arbitrary files. Affected versions include Solaris 8/9 (and possibly others as per reports). The underlying cause is untruste...

CVE-2004-0481

The logging feature in kcmsconfigure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCSClogFile file...

CVE-2004-0465

OpenConnect WebConnect (WebConnect 6.4.4, 6.5 and possibly earlier) is vulnerable to a read-only directory traversal in the jretest.html page. By sending a crafted request that abuses the WCP_USER parameter (using ..// sequences), an attacker can read INI-style files outside the webroot and view ...

CVE-2004-0466

The CVE-2004-0466 issue affects OpenConnect WebConnect (Windows) versions 6.4.4 and 6.5 (and possibly earlier). A denial-of-service vulnerability occurs when an HTTP request URL contains an MS-DOS device name (AUX, CON, PRN, COM1, LPT1); the server may stop responding to further requests, causing...

CVE-2004-0465

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCPUSER parameter...

RHEL 4 : CUPS (RHSA-2005:053)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:053 advisory. The Common UNIX Printing System provides a portable printing layer for UNIXR operating systems. During a source code audit, Chris Evans and...

RHEL 4 : krb5 (RHSA-2005:045)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:045 advisory. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. A heap based...

RHEL 4 : kdelibs (RHSA-2005:065)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:065 advisory. The kdelibs packages include libraries for the K Desktop Environment. Two flaws were found in the sandbox environment used to run Java-applet...