Mandrake Linux Security Advisory : xpdf (MDKSA-2004:161)

iDefense reported a buffer overflow vulnerability, which affects versions of xpdf = xpdf-3.0. An attacker could construct a malicious payload file which could enable arbitrary code execution on the target system. The updated packages are patched to protect against these vulnerabilities...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2004:160)

A vulnerability in the Konqueror web browser was discovered that would allow a malicious web site to take advantage of a flaw in kioftp to send email messages without user interaction. The updated packages are patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

yacyXSS.txt

Donato Ferrante Application: yacy http://www.yacy.net Version: 0.31 Bug: cross site scripting Date: 24-Dec-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1. Description 2. The bug 3...

CVE-2004-2141

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1827. Reason: This candidate is a duplicate of CVE-2004-1827. Notes: All CVE users should reference CVE-2004-1827 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2004-1182

hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted 1 username or 2 hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password...

CVE-2004-1139

Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service application crash...

CVE-2004-1146

Multiple cross-site scripting XSS vulnerabilities in 1 main.c and 2 login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script...

CVE-2004-1397

Cross-site scripting XSS vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl...

CVE-2004-1343

CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service server crash...

CVE-2004-1179

The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories...

CVE-2004-1241

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004. Notes: none...

CVE-2004-1384

Multiple cross-site scripting XSS vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 kp3, 2 type, 3 msg, 4 forumid, 5 pos, 6 catsapp, 7 catid, 8 msgballmsgnum, 9 fldballacctnum parameters to index.php or 10 ticketid to...

CVE-2004-1479

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0928. Reason: This candidate is a duplicate of CVE-2004-0928. Notes: All CVE users should reference CVE-2004-0928 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Immunity Canvas: MS04_045

Name| ms04045 ---|--- CVE| CVE-2004-0567 Exploit Pack| CANVAS Description| WINS Name Validation Stack Overflow Notes| CVE Name: CVE-2004-0567 VENDOR: Microsoft MSADV: MS04-045 VersionsAffected: Repeatability: One shot References: http://www.microsoft.com/technet/security/Bulletin/MS04-045.mspx CV...

CVE-2004-1317

Netcat for Windows 1.1 is affected by a stack-based buffer overflow in doexec.c when used with the -e option. An overly long DNS command can overflow the stack and enable remote code execution. This is the same base vulnerability described in CVE-2004-1317, with corroborating references in exploi...

BELL-CVE-2004-2264 CVE-2004-2264 does not affect BellSoft software

Bulletin has no description...

DEBIAN-CVE-2004-1897

Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service segmentation fault by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read...

CVE-2004-0452

CVE-2004-0452 : Race condition in File::Path::rmtree in Perl 5.6.1 and 5.8.4 sets world-write permissions, enabling local users to delete arbitrary files/directories and potentially read them via a symlink attack. This is tied to the Perl File::Path module and the rmtree operation. No explicit fi...

CVE-2004-1145

Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier 1 allow access to restricted Java classes via JavaScript and 2 do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary file...

CVE-2004-1296

CVE-2004-1296 affects groff (GNU troff) 1.18.1 where the scripts eqn2graph and pic2graph may overwrite arbitrary files via a symlink attack on temporary files. The vulnerability arises from insecure handling of temporary files, enabling local users to modify files with partial integrity impact. N...