CVE-2004-1361

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow...

CVE-2004-1000

lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...

CVE-2004-1350

Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6–3.6 SP4 contains multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. The issue affects the proxy server’s handling of input in its network-facing compon...

CVE-2004-1348

Technical details are not publicly available in the provided documents for CVE-2004-1348. Monitor for updates in the CVE/NVD records.

CVE-2004-1377

The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-1375

The CVE-2004-1375 entry covers an unknown local privilege escalation in HP-UX System Administration Manager (SAM) affecting HP-UX releases B.11.00, B.11.11, B.11.22, and B.11.23. Related OpenVAS/Nessus plugins (HP-UX SAM patches HPSBUX01104, PHCO_28125, PHCO_32549, PHSS_31240, PHSS_31243, PHSS_31...

CVE-2004-1378

The CVE-2004-1378 issue affects jabberd (open-source Jabber server) up to version 1.4.3 and earlier, where the embedded expat XML parser can be exploited by a malformed XML packet received on an XML-capable socket to trigger an application crash (DoS). Affected components include jabberd 1.4.3 an...

CVE-2004-1049

CVE-2004-1049 affects Microsoft Windows LoadImage API (cursor/icon handling). The vulnerability arises from an integer overflow when processing certain image resources (e.g., .ani, .ico, .cur, .bmp), which can lead to heap memory corruption and remote code execution if a user opens a crafted file...

CVE-2004-1356

Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service system panic via unknown vectors...

CVE-2004-1366

CVE-2004-1366 affects Oracle 10g Database Server, where the password for the SYSMAN account is stored in cleartext in the world-readable emoms.properties file. This local-access weakness could allow unprivileged or local users to gain DBA privileges. No explicit remediation version or patch is pr...

CVE-2004-1345

The CVE refers to Sun StorEdge Enterprise Storage Manager (ESM) 2.1 on Solaris 8/9 with an unknown vulnerability that allows local users granted the ESMUser role to escalate to root. The existing sources describe the vulnerability impact as local privilege escalation but do not provide concrete t...

CVE-2004-1353

Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control RBAC, allows local users to execute certain commands with additional privileges...

CVE-2004-1363

Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed...

CVE-2004-1370

Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via 1 DBMSEXPORTEXTENSION, 2 WKACL.GETACL, 3 WKACL.STOREACL, 4 WKADM.COMPLETEACLSNAPSHOT, 5...

CVE-2004-1347

The CVE-2004-1347 vulnerability affects X Display Manager (XDM) on Solaris 8. A remote attacker can cause a denial of service (XDM crash) by sending an invalid XDMCP request. Primary details in the connected documents confirm the affected component and the attack vector, noting the impact as DoS ...

CVE-2004-1353

Technical details for CVE-2004-1353 are not publicly provided in the supplied documents. The records note an unknown LDAP vulnerability on Sun Solaris 8/9 with RBAC enabling local privilege escalation, but no concrete affected components, versions, or fixes are disclosed here. Monitor for updates.

CVE-2004-1346

CVE-2004-1346 affects Sun Solaris Volume Manager (SVM) on Solaris 9. The issue allows local users to trigger a kernel panic via a malformed probe request to the SVM, constituting a local denial-of-service. Root cause details are limited in the provided documents; no publicly disclosed exploit vec...

CVE-2004-0991

Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files...

CVE-2004-1000

lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...

CVE-2004-1354

The Solaris Management Console SMC in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal .. atta...