CVE-2004-0948

CVE-2004-0948 entry is rejected and not used.

CVE-2004-1386

CVE-2004-1386 : TikiWiki before 1.8.4.1 fails to properly verify uploaded images, enabling remote attackers to upload and execute arbitrary PHP scripts. This is a server-side code execution risk via image upload in the Wiki edit flow. The public description notes a separate issue (CVE-2005-0200) ...

CVE-2004-0491

CVE-2004-0491 concerns a flaw in Red Hat Enterprise Linux 3 where the linux-2.4.21-mlock.patch mismanages the mlock page count when a process unlocks pages owned by another process, allowing local users to mlock more memory than the rlIMIT. The issue is documented across multiple sources (NVD, CV...

CVE-2004-1388

Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...

IGMP (CAN-2004-1137)

...

CVE-2004-1184

CVE-2004-1184 affects enscript (notably version 1.6.3) where EPSF pipe support accepts shell metacharacters, enabling arbitrary command execution by remote attackers or local users. Technical details across OpenVAS/Nessus entries confirm the vulnerability and its association with enscript; remedi...

CVE-2004-1184

The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters...

CVE-2004-1124

CVE-2004-1124 describes a local privilege/escape issue in SCO UnixWare 7.1.1–7.1.4 where the chroot jail can be broken, enabling local users to escape and perform unauthorized actions. The vulnerability affects specific binaries listed by SCO (e.g., /etc/conf/pack.d/namefs/Driver_atup.o, Driver_m...

CVE-2004-1380

The CVE-2004-1380 issue affects Firefox <1.0 and Mozilla

CVE-2004-1340

Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pamradiusauth.conf set to be world-readable, which allows local users to obtain sensitive information...

CVE-2004-1185

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...

CVE-2004-1381

CVE-2004-1381 affects Firefox before 1.0 and Mozilla before 1.7.5. The issue allows an inactive (background) tab to capture input focus on the active tab, enabling an attacker to read sensitive data entered on other sites (possible phishing risk). The connected advisories (Ubuntu USN-149-3 and re...

CVE-2004-1150

Winamp is affected by a stack-based buffer overflow in the in_cdda.dll plugin (affected versions: 5.0 through 5.08c). The flaw is triggered when processing cda:// URLs that include an over-long device name or track number, e.g., via crafted m3u/pls playlists. Exploitation enables arbitrary code e...

CVE-2004-1185

CVE-2004-1185 concerns the Unix filter program enscript with insufficient sanitization of filenames, enabling an attacker to execute arbitrary commands through crafted filenames. The initial description states that Enscript 1.6.3 can be exploited via unsanitised filenames to run arbitrary command...

CVE-2004-0467

CVE-2004-0467 affects Juniper Networks JUNOS software (versions 5.x through 7.x). A remote attacker can cause a denial of service by sending a large volume of MPLS packets that are not filtered or verified before reaching the Routing Engine, leading to reduced processing speed for other packets a...

CVE-2004-0555

CVE-2004-0555 is a buffer-overflow vulnerability in the Debian queue package. Debian security advisory DSA-643-1 states these remote overflows affect the queue package and have been fixed in 1.30.1-4woody2 (stable) and 1.30.1-5 (sid). The CVE entry notes the issue affects queue before 1.30.1. Con...

CVE-2004-1340

Summary: CVE-2004-1340 affects the libpam-radius-auth package on Debian GNU/Linux 3.0, where the accompanying pam_radius_auth.conf was installed world-readable, potentially exposing secrets to all local users. The issue is Debian-specific (CAN-2004-1340) and was addressed in Debian security advis...

CVE-2004-1057

The CVE-2004-1057 issue affects Linux kernel 2.4.19 and earlier, where several drivers do not mark memory with VM_IO, causing incorrect reference counts and potentially a denial of service via kernel panic when accessing freed pages. Connected advisories (RHSA-2006:0140, RHSA-2005:016, CESA-2006:...

CVE-2004-1186

CVE-2004-1186 is tied to enscript 1.6.3 and is described in connected sources as involving multiple buffer overflows that can crash the program, enabling a DoS scenario. The related OpenVAS/Nessus entries show patches released for enscript (e.g., SLES9 security update for enscript) and list CVE-2...

CVE-2004-1185

Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames...