8092 matches found
CVE-2004-1453
CVE-2004-1453 affects the GNU C Library (glibc). The issue arises when LD_DEBUG, LD_SHOW_AUXV, and LD_DYNAMIC_WEAK are not restricted for setuid programs, allowing a local attacker to obtain sensitive information (e.g., the program’s symbol list). This is a local information disclosure vulnerabil...
CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP...
CVE-2004-1435
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.60 and 4.61, 4.5x, 4.10 to 4.13, 4.00 to 4.02, and earlier versions, allows remote attackers to cause a denial of service control card reset via a large number of TCP connections with an invalid response instead of th...
CVE-2004-1468
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message...
CVE-2004-1486
CVE-2004-1486 affects HP-UX Serviceguard (A.11.x series) and Cluster Object Manager (A.01.x/B.01.x through B.03.00.01) with remote privilege escalation possible. Connected Nessus plugins enumerate multiple HP patches (PHSS_31065/PHSS_31066/PHSS_31067/PHSS_31069/PHSS_31070/PHSS_31072/PHSS_31073, e...
CVE-2004-1451
Technical details about CVE-2004-1451 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vendor notices to obtain affected versions, impact and remediation information.
CVE-2004-1485
CVE-2004-1485: Buffer overflow in the TFTP client of InetUtils 1.4.2 allows a remote DNS server to drive a large DNS response into gethostbyname, enabling arbitrary code execution. The connected documents confirm the vulnerability but do not provide remediation steps or explicit exploit details b...
CVE-2004-1446
Technical details (affected product/version, root cause, exploitability, and fix) are not publicly provided in the connected documents; monitor for updates.
CVE-2004-1465
WinZip
CVE-2004-1439
Vulnerability summary (CVE-2004-1439) : The BlackJumboDog FTP server (3.x) is affected by a buffer/stack overflow due to improper length checks on multiple FTP commands, notably USER, PASS, RETR, CWD, XMKD, and XRMD. An attacker can remotely trigger this condition to execute arbitrary code on the...
CVE-2004-0919
CVE-2004-0919 affects FreeBSD 5.x where the syscons CONS_SCRSHOT ioctl fails to validate input arguments. The advisory reports boundary/validation errors that may allow a local attacker with console access to read arbitrary kernel memory, potentially exposing sensitive data such as kernel/termina...
CVE-2004-1458
The CVE-2004-1458 entry concerns Cisco Secure Access Control Server (ACS) 3.2(2) build 15, specifically the CSAdmin web administration interface. The vulnerability allows remote attackers to cause a denial of service (hang) by flooding port 2002 with TCP connections. The available documents confi...
CVE-2004-1443
CVE-2004-1443 is a documented XSS vulnerability in the Horde-IMP inline MIME viewer affecting Horde-IMP versions 3.2.4 and earlier when accessed with Internet Explorer. The vulnerability allows an attacker to inject arbitrary script/HTML via a crafted e‑mail message. Public assessment sources con...
CVE-2004-0866
CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...
CVE-2004-1468
CVE-2004-1468 affects Webmin 1.x and Usermin 1.x. The webmail feature contains an input validation bug that allows a remote attacker to execute arbitrary commands by sending specially crafted e-mails with shell metacharacters, leading to remote code execution with the privileges of the Webmin/Use...
CVE-2004-0871
CVE-2004-0871 refers to a cross security boundary cookie injection issue in which cookies set over HTTP can be presented to HTTPS in the same domain (the cookie domain attribute can enable leakage across secure boundaries). The connected documentation attributes this to multiple browsers (Interne...
CVE-2004-1458
The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...
CVE-2004-1448
Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code...