8092 matches found
CVE-2004-1354
CVE-2004-1354 affects the Solaris Management Console (SMC) in Sun Solaris 8 and 9. The issue arises because SMC generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive informa...
CVE-2004-0638
The CVE-2004-0638 entry describes a buffer overflow in Oracle’s dbms_system.ksdwrt function (KSDWRTB) that affects Oracle 8i Release 1 8.1.7.4 and Oracle 9i Release 1/2 (9.0.1.4, 9.0.1.5, 9.2.0.3, 9.2.0.4). The vulnerability arises when a long second argument is passed, enabling remote authorized...
CVE-2004-1177
CVE-2004-1177 is an XSS vulnerability in Mailman’s driver script (affecting mailman up to before 2.1.5) where an unescaped URL in an error page can inject arbitrary script/HTML. Public references (GHSA advisory and multiple OpenVAS/Debian/SUSE entries) confirm the issue and link to affected Mailm...
CVE-2004-1039
The CVE-2004-1039 issue affects SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1 (and possibly other versions) when NFS mountd is run via inetd. The vulnerability arises because inetd spawns a new mountd process for each NFS mount-related request, causing memory exhaustion and potentially a system cra...
CVE-2004-1039
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service memory exhaustion via a series of requests, which causes inetd to launch a separate process for each request...
CVE-2004-1369
CVE-2004-1369 concerns the TNS Listener in Oracle 10g. The vulnerability allows remote attackers to cause a denial of service (listener crash) by sending a malformed service_register_NSGR request, where a value is used as an invalid offset for a pointer that references incorrect memory. The prima...
CVE-2004-1360
Unknown vulnerability in convfix in Sun Solaris 7 through 9, when invoked by convlpd, allows local users to overwrite arbitrary files...
CVE-2004-1377
The CVE-2004-1377 issue affects the a2ps package: the fixps (fixps.in) and psmandup (psmandup.in) scripts allow local users to overwrite arbitrary files via a symlink attack on temporary files, with impact being partial integrity if exploited. Documentation in multiple advisories confirms this vu...
CVE-2004-0931
CVE-2004-0931 affects MySQL MaxDB prior to 7.5.00.18. The vulnerability lies in the WebDBM server component where a remote attacker can send an HTTP request to the webdbm with high-ASCII values in the Server field, triggering an assert in IsAscii7 and causing a denial-of-service crash. Public ref...
CVE-2004-1367
CVE-2004-1367 affects Oracle 10g Database Server. When installed with a password containing an exclamation point for the DBSNMP or SYSMAN user, an error is logged to the world‑readable postDBCreation.log, potentially exposing the password to local users who could use it against SYS or SYSTEM acco...
CVE-2004-1370
CVE-2004-1370 is a set of confirmed SQL injection vulnerabilities in Oracle 9i/10g that affect PL/SQL procedures running with definer rights. The flaws allow remote attackers to execute arbitrary SQL commands and potentially gain privileges via the following procedures: DBMS_EXPORT_EXTENSION, WK_...
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded...
CVE-2004-1360
The vulnerability CVE-2004-1360 concerns Sun Solaris versions 7–9, where the conv_fix function is exposed via conv_lpd. The root cause, as described, allows local users to overwrite arbitrary files, indicating a local-privilege/path-traversal like impact on file integrity. The sources provided (N...
CVE-2004-0561
Format string vulnerability in the log routine for gopher daemon gopherd 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...
CVE-2004-1346
The Sun Solaris Volume Manager SVM on Solaris 9 allows local users to cause a denial of service kernel panic via a malformed probe request to the SVM...
CVE-2004-1372
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via 1 a long third argument to the rec2xml function or 2 a long filename argument to the generatedistfile procedure...
CVE-2004-1306
The connected advisories confirm a heap-based buffer overflow in winhlp32.exe that can be triggered by a crafted .hlp file, exposing remote code execution on affected Windows versions: Windows NT, Windows 2000 (SP4), Windows XP (SP2), and Windows Server 2003. Root cause: unsafe handling during ph...
CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files...
CVE-2004-1361
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow...