CVE-2004-1394

An advisory for CVE-2004-1394 describes a local privilege escalation in Sun Solaris 8 and 9. The pfexec function fails to properly handle an invalid entry in the exec_attr database within a custom rights profile, potentially allowing local users with such profiles to execute profile commands with...

CVE-2004-0848

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after 1 "%00 null byte in .doc filenames or 2 "%0a" carriage return in .rtf filenames...

CVE-2004-1131

CVE-2004-1131 affects SCO OpenServer 5.0.6 and 5.0.7. The vulnerability involves multiple buffer overflows in the enable command, allowing local users to execute arbitrary code via long command line arguments. These details come from the description of the CVE entry and are corroborated by associ...

CVE-2004-0848

CVE-2004-0848 corresponds to a buffer overflow in Microsoft Office XP that can allow remote code execution via specially crafted HTML links referencing URL file locations. Connected advisories detail that the overflow occurs in the Office process handling URL file references, enabling arbitrary c...

CVE-2004-1393

Technical details about CVE-2004-1393 are not publicly available in the provided documents. No concrete affected products, impact description, or remediation are described here. Monitor for updates as additional information is released.

CVE-2004-1131

Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments...

CVE-2004-0948

...

CVE-2004-1387

The CVE-2004-1387 entry concerns the apache-utils package, specifically the check_forensic script (version 1.3.31). The vulnerability allows a local user to overwrite or create arbitrary files via a symlink attack on temporary files, with the underlying root cause being improper handling of tempo...

CVE-2004-1382

The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968...

CVE-2004-0491

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit...

CVE-2004-1382

CVE-2004-1382 affects glibc 2.3.4 and earlier via the glibcbug script, enabling a local symlink attack to overwrite arbitrary files in temporary locations. The root cause is the insecure handling of temporary files by the glibcbug script, with published advisories (e.g., CAN-2004-1382 and related...

CVE-2004-1385

CVE-2004-1385 affects phpGroupWare up to version 0.9.16.003. The vulnerability is an information-disclosure issue where an error message reveals the web server path due to (1) unexpected characters in the session ID (shell metacharacters), (2) an invalid appname parameter to preferences.php, or (...

CVE-2004-1388

CVE-2004-1388 describes a format-string vulnerability in BerliOS GPSD (gpsd, formerly pygps) within the gpsd_report function, affecting versions 1.9.0 through 2.7. An attacker could remotely trigger arbitrary code execution via GPS requests with format specifiers unhandled by syslog calls. Public...

CVE-2004-1389

Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process,...

CVE-2004-1385

phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via 1 unexpected characters in the session ID such as shell metacharacters, 2 an invalid appname parameter to preferences.php or 3 an invalid menuaction parameter to index.php, which reveals the web server...

CVE-2004-1389

Summary: CVE-2004-1389 describes an unknown vulnerability in the Veritas NetBackup Administrative Assistant interfaces across multiple NetBackup products (BusinesServer 3.4/3.4.1/4.5, DataCenter 3.4/3.4.1/4.5, Enterprise Server 5.1, NetBackup Server 5.0/5.1) that allows arbitrary command executio...

CVE-2004-1391

Untrusted execution path vulnerability in the PPPoE daemon PPPoEd in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program...

CVE-2004-1388

Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...

CVE-2004-1384

CVE-2004-1384 refers to multiple XSS vulnerabilities in phpGroupWare 0.9.16.003 and earlier, exploitable via parameters to index.php or ticket_id to viewticket_details.php. Related CVEs include CVE-2004-1383 (SQL injection) and CVE-2004-1385 (information disclosure). Public sources consistently d...

CVE-2004-1390

CVE-2004-1390 affects the PPPoE daemon (PPPoEd) in QNX RTP 6.1 . The issue is described as multiple buffer overflows in PPPoEd that allow a remote attacker to execute arbitrary code by supplying a long argument to any of the flags: -F, name, en, upscript, downscript, retries, timeout, scriptdetac...