CVE-2004-1516

The CVE-2004-1516 entry corresponds to a CRLF injection (HTTP response splitting) vulnerability in phpWebSite 0.9.3-4, exploitable via the block_username parameter in the user module. The issue arises from insufficient input validation in the PHP application, enabling remote attackers to inject a...

CVE-2004-1494

CVE-2004-1494: A buffer overflow in the Screen Fetch option of XDICT 2002–2005. Exploitation via a long string could cause denial of service (CPU consumption or crash) and possibly enable remote code execution. The provided documents contain this description and do not include exploit details or ...

CVE-2004-1526

Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator...

CVE-2004-1523

CVE-2004-1523 describes a format-string vulnerability in the game console of Hired Team: Trial 2.0 and earlier and 2.200. The flaw allows remote attackers to trigger a denial of service (application crash) by supplying format string specifiers in a message. Affected software is the Hired Team gam...

CVE-2004-1503

The CVE-2004-1503 entry concerns the Java Runtime Environment (JRE) InitialDirContext vulnerability. Affected software are JRE versions 1.4.2, 1.5.0 (and possibly others). The issue arises in the InitialDirContext where an integer overflow allows a large sequence of DNS requests to cause the xid ...

CVE-2004-1496

Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing 1 ".." dot dot backslash, 2 "../" dot dot slash, 3 "/%2E%2E%5C" encoded dot dot backslash, or 4 "%2E%2E%2F" encoded dot dot slash...

CVE-2004-1503

Integer overflow in the InitialDirContext in Java Runtime Environment JRE 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service Java exception and failed DNS requests via a large number of DNS requests, which causes the xid variable to wrap around and becom...

CVE-2004-1493

Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...

CVE-2004-1542

Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service server or client crash via a long 1 query or 2 reply...

CVE-2004-1523

Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service application crash via format string specifiers in a message...

CVE-2004-1536

SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board IPB 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2004-1524

Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service game interruption via a malformed UDP packet sent to a game port, such as port 29200...

CVE-2004-1513

04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries...

CVE-2004-1539

Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, triggering a NULL dereference. Affected software: Halo game server reply handling. Root cause: NULL dereference caused by processing a long value i...

CVE-2004-1520

CVE-2004-1520 involves a stack-based buffer overflow in the Ipswitch IMail IMAP4D service caused by processing an excessively long DELETE command. It requires a valid IMAP login and password (authenticated access) and can lead to remote code execution with the privileges of the IMAP4d process; im...

CVE-2004-1506

CVE-2004-1506 : WebCalendar has multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as described (including examples using img tags). The provided documents ...

CVE-2004-1502

CVE-2004-1502 refers to the Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier. The issue allows remote attackers to cause a denial of service (socket exhaustion) by sending a Telnet request to an IP address of the proxy’s network interface, which triggers a loop. The available sources do n...

CVE-2004-1514

04WebServer 1.42 allows remote attackers to cause a denial of service fail to restart properly via an HTTP request for an MS-DOS device name such as COM2...

CVE-2004-1540

CVE-2004-1540 affects ZyXEL Prestige routers (623, 650, 652) where HTTP Remote Administration is enabled. The vulnerability exists because access to the page “/rpFWUpload.html” does not require authentication, enabling a remote attacker to reset the router configuration to its factory state. Docu...

CVE-2004-1538

CVE-2004-1538 describes a SQL injection in PHP-Kit’s include.php affecting PHP-Kit versions 1.6.03 through 1.6.1, where an attacker can manipulate the id parameter to execute arbitrary SQL commands. This is a remote vulnerability with network attack vector and partial impact on confidentiality, i...