CVE-2004-1438

The CVE-2004-1438 issue affects the Subversion Apache module mod_authz_svn for Subversion 1.0.4-r1 and earlier. A flaw in mod_authz_svn allows remote authenticated users with write access to the repository to read unauthorized parts of the repository via the svn copy command. Impact: access to po...

CVE-2004-1477

CVE-2004-1477 refers to a cross-site scripting (XSS) vulnerability in the Management Console of Macromedia/JRun 4.0. The vulnerability allows remote attackers to inject arbitrary web script/HTML and potentially hijack a user’s session. Connected sources corroborate that this CVE is part of a set ...

CVE-2004-1484

The CVE-2004-1484 issue affects socat (1.4.0.3 and earlier). It is a format string vulnerability in the _msg function in error.c that can be triggered when socat is used as an HTTP proxy client with the -ly option, enabling remote attackers (or local users) to execute arbitrary code via format st...

CVE-2004-1466

CVE-2004-1466 affects Gallery. Vulnerable in the upload handling where save_photos.php stores uploads in a temporary directory; if that directory is under the webroot, a remote attacker could upload a PHP file and, within a 30‑second window before deletion, execute arbitrary code. The issue is tr...

CVE-2004-0870

CVE-2004-0870 affects KDE Konqueror. The issue: cookies set over HTTP can be seen on HTTPS within the same domain, enabling potential cookie theft and unauthorized activity (Cross Security Boundary Cookie Injection). The core cause is insecure-channel cookies being presented on secure channels fo...

CVE-2004-1470

CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server...

CVE-2004-1434

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.10 to 4.12, 4.5x, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via malformed SNMP packets...

CVE-2004-1450

Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations...

CVE-2004-1485

CVE-2004-1485: Buffer overflow in the TFTP client of InetUtils 1.4.2 allows a remote DNS server to drive a large DNS response into gethostbyname, enabling arbitrary code execution. The connected documents confirm the vulnerability but do not provide remediation steps or explicit exploit details b...

CVE-2004-1483

Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...

CVE-2004-1466

The settimelimit function in Gallery before 1.4.4p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using savephotos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directo...

CVE-2004-1432

CVE-2004-1432 applies to Cisco ONS platforms: ONS 15327, ONS 15454, and ONS 15454 SDH across multiple releases (e.g., 4.6(0)/4.6(1), 4.5.x, 4.1(0)–4.1(3), 4.0(0)–4.0(2) and earlier). The issue allows remote attackers to cause a denial of service (control card reset) by sending malformed IP or ICM...

CVE-2004-1456

Summary: CVE-2004-1456 is a remote code execution flaw in CVSTrac’s filediff functionality. The issue arises from inadequate input sanitation that allows a remote attacker to execute arbitrary commands through shell metacharacters in the rcsinfo parameter. Public sources (OpenVAS/Nessus entries) ...

CVE-2004-1475

CVE-2004-1475 affects xine-lib 1-rc2 through 1-rc5. The vulnerability comprises multiple buffer overflows: two stack-based overflows in the VCD disc label handling (vcd:// MRLs) and in subtitle parsing, plus a heap-based overflow in the DVD sub-picture decoder. These flaws can allow remote attack...

CVE-2004-1481

Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 6.0.12.1040 and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based...

CVE-2004-1464

Cisco IOS 12.215 and earlier allows remote attackers to cause a denial of service refused VTY virtual terminal connections, via a crafted TCP connection to the Telnet or reverse Telnet port...

CVE-2004-1476

CVE-2004-1476 affects xine-lib (versions 1-rc2 through 1-rc5, derived from libcdio). The vulnerability is a stack-based buffer overflow in the VideoCD (VCD) handling, exploitable via a VideoCD with an unterminated disk label, which can lead to arbitrary code execution. OpenVAS/Gentoo advisories i...

CVE-2004-1457

The CVE-2004-1457 description indicates a vulnerability in the VPN capability of Novell Bordermanager 3.8, where remote attackers can cause a denial-of-service (ABEND in IKE.NLM) by sending a malformed IKE packet, as tested by the Striker ISAKMP Protocol Test Suite. The available sources specify ...

CVE-2004-1448

CVE-2004-1448 affects Jetbox One 2.0.8 (and possibly other versions). The issue is an unrestricted remote file upload in the IMAGES module that allows users with Author privileges to upload PHP files, leading to arbitrary code execution on the server. The public records describe the vulnerability...

CVE-2004-1437

CVE-2004-1437 : Multiple buffer overflows in Pavuk’s digest authentication implementation (versions up to and including 0.9.28-r2) allow remote attackers to execute arbitrary code. The issue is documented across multiple sources (NVD entry for CVE-2004-1437 and Gentoo GLSA 200407-19). The Gentoo ...