8092 matches found
CVE-2004-2554
Novell Client Firewall NCF 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges...
CVE-2004-2569
ipmenu 0.0.3 before Debian GNU/Linux ipmenu0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file...
CVE-2004-2590
Unspecified vulnerability in meindlSOFT Cute PHP Library aka cphplib 0.46 has unknown impact and attack vectors, related to regular expressions...
CVE-2004-2597
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's...
CVE-2004-2607
A numeric casting discrepancy in sdlaxfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer...
CVE-2004-2609
The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information an unencrypted password for a Windows domain account via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow...
CVE-2004-2632
phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg'Servers' variables...
CVE-2004-2636
TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL...
CVE-2004-2644
Unspecified vulnerability in ASN.1 Compiler asn1c before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags...
CVE-2004-2679
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange IKE with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information...
CVE-2004-2692
The execdir PHP patch php-exec-dir 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the phpescapeshellcmd function...
CVE-2004-2696
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation RMI over Internet Inter-ORB Protocol IIOP, does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in a...
CVE-2004-2707
Multiple unspecified vulnerabilities in Gyach Enhanced Gyach-E before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses...
CVE-2004-2727
Buffer overflow in MEHTTPS HTTPMail of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service application crash via a long HTTP GET request...
CVE-2004-2732
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key...
CVE-2004-2735
Cross-site scripting XSS vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 SETPREFERENCES parameter in SetPreferences.cgi; 2 BRANCH parameter in branchView.cgi; 3 FSPC and 4 COMPLETE parameters in changeByUsers.cgi; 5 FSPC, 6 LABEL, 7...
CVE-2004-2742
Cross-site scripting XSS vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report RPT file...
CVE-2004-2748
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message...
CVE-2004-2753
Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."...