CVE-2004-0931

MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service crash via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function...

CVE-2004-1368

The CVE-2004-1368 entry affects Oracle ISQL*Plus in Oracle 10g Application Server. The vulnerability allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script, enabling potential arbitrary-file execution on the affected server. The ac...

CVE-2004-0897

CVE-2004-0897 covers a remote code execution vulnerability in the Microsoft Windows Indexing Service (Indexing Service) on Windows XP and Windows Server 2003. The issue arises from an unchecked/lenient handling of query input leading to a buffer overflow, enabling an attacker to execute arbitrary...

CVE-2004-1363

CVE-2004-1363 : The provided data confirms a buffer overflow in the extproc component of Oracle 10g. An attacker can trigger remote code execution by manipulating environment variables in the library name, which are expanded after the length check. The vulnerability is described as enabling remot...

CVE-2004-1355

Technical details about CVE-2004-1355 are not publicly available in the provided documents; monitor for updates.

CVE-2004-1143

The CVE-2004-1143 issue concerns Mailman prior to version 2.1.5, where auto-generated passwords are limited to about 5 million, enabling remote attackers to perform brute-force guessing of subscriber credentials. Remediation: upgrade to Mailman 2.1.5 or newer (as detailed in related advisories). ...

CVE-2004-1371

Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure...

CVE-2004-0991

CVE-2004-0991 concerns a buffer overflow in mpg123 before version 0.59s-r9, allowing remote attackers to execute arbitrary code via crafted MP2/MP3 frame headers. The connected OpenVAS/Gentoo entries corroborate mpg123 vulnerability details but do not provide an official fixed version or patch va...

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2004-1356

Technical details about CVE-2004-1356 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official sources.

CVE-2004-1049

Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."...

CVE-2004-1364

CVE-2004-1364 is an Oracle extproc directory traversal vulnerability affecting Oracle 9i and 10g. The flaw allows remote attackers to access arbitrary libraries outside the $ORACLE_HOME/bin directory by leveraging the extproc mechanism, potentially executing OS commands with the privileges of the...

CVE-2004-1373

Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service application crash and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file...

CVE-2004-1349

CVE-2004-1349 affects gzip releases 1.3 and earlier on Solaris 8. The vulnerability occurs when gzip is invoked with the -f or -force flags, causing it to alter permissions of files that are hard linked to the target, enabling local users to view or modify those linked files. Connected sources co...

CVE-2004-1182

CVE-2004-1182 affects HylaFAX’s hfaxd server. When installed with a weak hosts.hfaxd file, an attacker can craft a username or hostname that matches a regular expression against a hosts.hfaxd entry without a password, allowing remote authentication bypass and bypassing intended access restriction...

CVE-2004-0561

Format string vulnerability in the log routine for gopher daemon gopherd 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-1377

The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-1182

hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...

CVE-2004-1359

CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...

CVE-2004-0560

CVE-2004-0560 affects the gopher server (gopherd) and is caused by an integer overflow when posting content of a specially crafted size. The vulnerability can lead to denial of service and may allow arbitrary code execution. Public disclosures and fixes are documented in Debian’s DSA-638-1, which...