8092 matches found
CVE-2004-1328
CVE-2004-1328 concerns an HP-UX local privilege‑escalation in the newgrp(1) command affecting HP-UX B.11.00, B.11.04 and B.11.11. The issue is documented across CVE/NVD and HP advisories, with patches PHCO_26385, PHCO_29682 and PHCO_32280 issued to address the vulnerability (linked to HPSBUX01102...
CVE-2004-1334
The CVE concerns the Linux kernel before 2.6.10, where the function ip_options_get is vulnerable to an integer overflow when cmsg_len is -1. This can be exploited by local users to trigger a kernel crash (DoS) via a crafted message length, leading to a buffer overflow. Affected component: kernel ...
CVE-2004-1335
The CVE-2004-1335 entry describes a memory leak in the Linux kernel’s ip_options_get function (pre-2.6.10) that can cause local denial of service via repeated ip_cmsg_send calls. Affected component is the kernel networking stack; impact is partial availability due to memory exhaustion. The vulner...
CVE-2004-1318
CVE-2004-1318 is an XSS vulnerability in Namazu’s namazu.cgi affecting Namazu versions up to 2.0.13. A crafted query beginning with a tab character (%09) prevents proper sanitization, allowing remote attackers to inject arbitrary HTML/JavaScript. The vulnerability appears in the query handling pa...
CVE-2004-1332
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v debug option enabled, allows remote attackers to execute arbitrary code via a long command request...
CVE-2004-1331
Microsoft Internet Explorer 6.0 SP2 contains a vulnerability in the execCommand API where a SaveAs operation can bypass the File Download - Security Warning dialog, allowing remote attackers to save arbitrary files with arbitrary extensions on the target system. The CPAI advisory describes exploi...
CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the 1 artist or 2 song fields of a music file, if the file is processed using Internet Explorer...
CVE-2004-1338
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXECCBKFNDML to add arbitrary functions to the SDOCMTDBKFNTABLE and SDOCMTCBKDMLTABLE, then performing a DELETE on the SDOTXNIDXINSERTS table, which...
CVE-2004-1329
The CVE describes an untrusted execution path vulnerability in IBM AIX 5.1–5.3: the diag commands (lsmcode, diag_exec, invscout, invscoutd) can be coerced into running arbitrary code when the DIAGNOSTICS environment variable is modified to reference a malicious Dctrl program. Affected components/...
CVE-2004-1332
CVE-2004-1332 is a stack-based buffer overflow in HP-UX 11.x FTP daemon ftpd (enabled with -v) that allows remote code execution via a long command. Connected OpenVAS/Nessus entries document multiple HP patches (PHNE_24395/29460/29461/29462/23949/23950/31034, etc.) addressing ftpd/ftp buffer hand...
CVE-2004-1333
Integer overflow in the vcresize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service kernel crash via a short new screen value, which leads to a buffer overflow...
CVE-2004-1338
CVE-2004-1338 affects Oracle 9i and 10g. The flaw lets local users escalate privileges by abusing CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to seed arbitrary functions into SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then deleting from SDO_TXN_IDX_INSERTS to trigger SDO_CMT_CBK_TRIG, which executes ...
CVE-2004-1333
The CVE-2004-1333 entry describes an integer overflow in the vc_resize function of Linux kernel 2.4 and 2.6 before 2.6.10, which allows local users to trigger a kernel crash (DoS) via a short new screen value that leads to a buffer overflow. This is the only concrete detail provided in the initia...
CVE-2004-1327
Crystal FTP Client 2.8 is affected by a buffer overflow in the handling of LIST responses containing a file name with a long extension, allowing remote attackers to execute arbitrary code. The vulnerability specifics point to a remote code execution risk via crafted responses. The provided docume...
CVE-2004-1322
Cisco Unity 2.x–4.x (when integrated with Microsoft Exchange) is affected by hard coded usernames and passwords that enable remote unauthorized access and the ability to change configuration or read emails. The vulnerability is described across CVE-2004-1322 references from NVD and CVE records, i...
CVE-2004-1327
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension...
CVE-2004-1318
Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server NDS 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code...
CVE-2004-1318
Cross-site scripting XSS vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab "%09" character, which prevents the rest of the query from being properly sanitized...