CVE-2004-1189

The CVE-2004-1189 issue affects MIT Kerberos 5 (krb5) up to version 1.3.5. The add_to_history function in svr_principal.c during a password change fails to properly track the password policy history count and the maximum number of keys, which can lead to an array index out-of-bounds and a heap-ba...

CVE-2004-1062

CVE-2004-1062 involves multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2. The affected component is the ViewCVS web interface, with the root cause described as the ability to inject arbitrary HTML and web script via certain error messages. Reported impact is that an attacker co...

CVE-2004-1142

CVE-2004-1142 affects Ethereal versions 0.9.0 through 0.10.7, where a remote attacker can trigger a denial of service (CPU consumption) by sending a malformed SMB packet. The OpenVAS/OSS advisories confirm Ethereal-related fixes and security updates across platforms (e.g., SLES9, Gentoo GLSA GLSA...

CVE-2004-1388

Format string vulnerability in the gpsdreport function for BerliOS GPD daemon gpsd, formerly pygps 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls...

CVE-2004-2215

RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of other users and possibly gain privileges...

CVE-2004-2313

Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts such as root, which allows remote attackers to guess the root password via brute force attacks...

CVE-2004-2541

Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long include line that is later browsed by the target...

CVE-2004-2654

The clientAbortBody function in clientside.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service segmentation fault via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer...

CVE-2004-2698

Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service IMWheel crash and possibly modify arbitrary files via a symlink attack on the imwheel.pid file...

CVE-2004-2269

Stack-based buffer overflow in pads.c in Passive Asset Detection System Pads might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability...

CVE-2004-0998

CVE-2004-0998 is a format-string vulnerability in telnetd-ssl versions up to 0.17.17+0.1-2woody3 (stable) / 0.17.24+0.1-6 (sid) that allows a remote attacker to execute arbitrary code. Debian's DSA-616-1 confirms a remote, format-string flaw in netkit-telnet-ssl with a fixed upgrade path to the c...

Immunity Canvas: GPSD

Name| gpsd ---|--- CVE| CVE-2004-1388 Exploit Pack| CANVAS Description| gpsd Notes| References: http://www.digitalmunition.com/DMA2005-0125a.txt CVE Name: CVE-2004-1388 VENDOR: BerliOS Note: Vulnerable Versions: gpsd version 1.9.0 through version 2.7 This is a one shot exploit. Date public:...

CVE-2004-2569

ipmenu 0.0.3 before Debian GNU/Linux ipmenu0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file...

CVE-2004-2265

UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...

CVE-2004-0852

The CVE-2004-0852 issue is a buffer overflow in htget 0.93 that can allow remote code execution via a crafted URL. Public advisories (Debian DSA-611-1) describe the vulnerability in htget and provide a fixed package version (0.93-1.1woody1). The NVD entry lists CVSSv2 base metrics (AV:N/AC:L/Au:N...

CVE-2004-1317

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command...

CVE-2004-0808

The processlogonpacket function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAMUASCHANGE request with a length value that is larger than the number of structures that are provided...

CVE-2004-1059

Multiple cross-site scripting XSS vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the 1 next and 2 prev result search pages, and the 3 extended and 4 simple search forms...

DEBIAN-CVE-2004-2159

Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via 1 xmlelem.c and 2 xmlselect.c...

CVE-2004-2682

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer...