Mac OS X Java JRE Plug-in Capability Arbitrary Package Access (Security Update 2005-002)

The remote host is missing Security Update 2005-002. This security update contains a security bugfix for Java 1.4.2. A vulnerability in the Java Plug-in may allow an untrusted applet to escalate privileges, through JavaScript calling into Java code, including reading and writing files with the...

RHEL 4 : vim (RHSA-2005:036)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:036 advisory. VIM Vi IMproved is an updated and improved version of the vi screen-based editor. Ciaran McCreesh discovered a modeline vulnerability in VIM...

RHEL 4 : enscript (RHSA-2005:040)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:040 advisory. GNU enscript converts ASCII files to PostScript. Enscript has the ability to interpret special escape sequences. A flaw was found in the...

RHEL 4 : php (RHSA-2005:032)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:032 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. Flaws including possible information disclosure,...

RHEL 4 : libtiff (RHSA-2005:035)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:035 advisory. The libtiff package contains a library of functions for manipulating TIFF Tagged Image File Format image format files. infamous41md discovere...

RHEL 4 : gpdf (RHSA-2005:057)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2005:057 advisory. GPdf is a viewer for Portable Document Format PDF files for GNOME. A buffer overflow flaw was found in the Gfx::doImage function of Xpdf whic...

CVE-2004-1702

Removed by vendor...

CVE-2004-1701

CVE-2004-1701 describes a remote vulnerability in Cfengine’s cfservd: a heap-based buffer overflow in the AuthenticationDialogue() function allows an attacker to execute arbitrary code via a long SAUTH command during RSA authentication, affecting Cfengine 2.0.0 through 2.1.7p1. Public records als...

CVE-2004-1702

The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service crash...

CVE-2004-1701

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication...

CVE-2004-1702

CVE-2004-1702 affects Cfengine cfservd (versions 2.0.0–2.1.7p1). The vulnerability is in cfservd’s AuthenticationDialogue() where the return value of ReceiveTransaction is not properly handled, causing a failed malloc and a null dereference that can crash the process. OpenVAS and Gentoo GLSA desc...

CVE-2004-1701

Removed by vendor...

CVE-2004-1579

CVE-2004-1579 affects CubeCart 2.0.1. The issue is an information disclosure: sending an HTTP request with an invalid cat_id parameter causes a PHP error message that reveals the full path, exposing partial confidentiality loss. The NVD entry reports a base score of 5.0 (MEDIUM) with network atta...

CVE-2004-1550

CVE-2004-1550 affects Motorola WR850G hardware with firmware 4.03. An unauthenticated remote attacker can trigger an authentication bypass by repeatedly requesting ver.asp, allowing login as an administrator and access to sensitive information. Metasploit modules corroborate that a GET /ver.asp r...

CVE-2004-1618

CVE-2004-1618 affects Vypress Tonecast 1.3 and earlier. The vulnerability arises when processing a malformed mp2 stream, which can cause the application to crash and thus result in a denial of service. The core impact documented is a partial availability hit due to an application crash triggered ...

CVE-2004-1605

SalesLogix 6.1 contains an authentication bypass vulnerability. An attacker can remotely bypass login by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator. The CVSS metrics indicate network access, low attack complexity, and no authentication required, with p...

CVE-2004-1558

CVE-2004-1558 affects YahooPOPS! (YPOPs!) in versions 0.4–0.6. The vulnerability arises from multiple stack-based buffer overflows in the POP3 service handling a long POP3 USER command or a long SMTP request, enabling remote denial of service (crash) and potentially arbitrary code execution. The ...

CVE-2004-1628

CVE-2004-1628 affects the rssh project (before 2.2.2). The vulnerability is a format string issue in log.c that can allow remote authenticated users to execute arbitrary code. Exploitation details are not provided in the connected documents beyond the CVE description, but multiple sources (Gentoo...

CVE-2004-1613

CVE-2004-1613 affects Mozilla and related Mozilla-based packages. The issue is a denial-of-service caused by certain HTML constructs (TEXTAREA, INPUT, FRAMESET or IMG) followed by a null character and trailing characters, which can crash the application. Affected releases are addressed in vendor ...

CVE-2004-1691

CVE-2004-1691 affects DNS4Me 3.0.0.4 Web Server. The vulnerability allows remote attackers to cause a denial of service by sending a large amount of data, leading to CPU consumption and a crash. The available data specifies an affected component (Web Server in DNS4Me 3.0.0.4) and the impact on av...