8092 matches found
CVE-2004-1068
A "missing serialization" error in the unixdgramrecvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition...
CVE-2004-1067
Off-by-one error in the mysaslcanonuser function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username...
CVE-2004-1187
Heap-based buffer overflow in the pnmgetchunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNATAG values, a different vulnerability than CVE-2004-1188...
CVE-2004-1277
The downloadselectionrecursive function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / slash characters...
CVE-2004-1280
The guipopupviewfly function in guitviewpopup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2004-1216
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service server freeze via a long 1 nickname or 2 model type, which generates dialog boxes on the server that must be manually handled before the server continues the game...
CVE-2004-1222
weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter...
CVE-2004-1226
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter...
CVE-2004-1259
Multiple buffer overflows in the handledirective function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via crafted ABC files...
CVE-2004-1264
Buffer overflow in the simplifypath function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary code via a crafted chbg scenario file...
CVE-2004-1308
Integer overflow in 1 tifdirread.c and 2 tiffax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFFASCII or TIFFUNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow...
CVE-2004-0949
The smbrecvtrans2 function call in the samba filesystem smbfs in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to 1 read arbitrary kernel information or 2 raise a counter value to an arbitrary number by...
CVE-2004-1019
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow"...
CVE-2004-1022
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software...
CVE-2004-1111
Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...
CVE-2004-1120
Multiple buffer overflows in 1 http.c, 2 http-retr.c, 3 main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header...
CVE-2004-1127
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command...
CVE-2004-1151
Multiple buffer overflows in the 1 sys32nisyscall and 2 sys32vm86warning functions in sysia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges...
CVE-2004-1154
Integer overflow in the Samba daemon smbd in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer...