CVE-2004-1676

The vulnerability CVE-2004-1676 affects Gadu-Gadu 6.0 build 149, where the image sending feature is vulnerable to a heap-based buffer overflow triggered by a crafted GG_MSG_IMAGE_REPLY message. This can allow remote code execution. The available sources confirm the affected product and the underl...

CVE-2004-1681

CVE-2004-1681 affects QNX Photon microGUI on QNX RTP 6.1. Affected components are phrelay-cfg, phlocale, pkg-installer, and input-cfg, with multiple buffer overflows described as enabling local privilege escalation through an overly long -s (server) command line parameter. The vulnerability is lo...

CVE-2004-1626

This CVE involves Ability Server 2.34 (and possibly other versions), where a stack-based buffer overflow is triggered by parsing the STOR/APPE commands, allowing remote code execution. The issue is confirmed on 2.34 and has been reported in 2.25 and 2.32. A Metasploit exploit module exists (explo...

CVE-2004-1640

The CVE-2004-1640 entry describes multiple cross-site scripting (XSS) vulnerabilities in XOOPS versions 0.94 and 1.0, exploitable via user-supplied input in two scripts: the terme parameter to search.php and the letter parameter to letter.php. The underlying issue is improper handling/sanitizatio...

CVE-2004-1578

The CVE-2004-1578 entry concerns Invision Power Board 2.0.0 with a cross-site scripting (XSS) vulnerability in index.php that allows an attacker to inject arbitrary web script or HTML via the Referer header in HTTP requests. Documented impact from sources like NVD and CVE lists is that remote att...

CVE-2004-1679

TwinFTP 1.0.3 R2 is affected by a directory traversal vulnerability that allows remote attackers to create arbitrary files via a .../ sequence in the CWD, STOR, or RETR commands. The issue, described in CVE-2004-1679, enables arbitrary file creation and is classified with a CVSS-like impact indic...

CVE-2004-1674

viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to 1 delete arbitrary files via the originalfolder parameter or 2 move arbitrary files via the messageid parameter...

CVE-2004-1613

Mozilla allows remote attackers to cause a denial of service application crash from null dereference or infinite loop via a web page that contains a 1 TEXTAREA, 2 INPUT, 3 FRAMESET or 4 IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme...

CVE-2004-1675

CVE-2004-1675 affects Serv-U FTP Server 4.x–5.x. The vulnerability is triggered by the STOU command with an MS-DOS device name argument (e.g., COM1, LPT1, PRN, AUX), causing an application crash and a remote denial of service. Public references describe this as a remote DoS without user interacti...

CVE-2004-1653

CVE-2004-1653 concerns OpenSSH’s default setting that enables AllowTcpForwarding. The description states that with an anonymous access program such as AnonCVS, remote authenticated users could perform a port bounce, effectively using the SSH server as a proxy to reach internal services. The vulne...

CVE-2004-1638

CVE-2004-1638: MailCarrier 2.51 SMTP service contains a buffer overflow that can be triggered by sending an overly long EHLO command (and possibly HELO), enabling remote code execution. Public exploit references exist (e.g., Metasploit module for MailCarrier SMTP EHLO overflow) and multiple advis...

CVE-2004-1549

The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection...

CVE-2004-1661

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

CVE-2004-1564

CRLF injection vulnerability in subscribethread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter...

CVE-2004-1600

index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message...

CVE-2004-1683

A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap...

CVE-2004-1572

AJ-Fork 167 does not restrict access to directories such as 1 data, 2 inc, 3 plugins, 4 skins, or 5 tools, which allows remote attackers to list files in those directories via a direct HTTP request...

CVE-2004-1596

The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to appsta.stm...

CVE-2004-1700

Cross-site scripting XSS vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message...

CVE-2004-1609

SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access...