CVE-2004-0563

The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password...

CVE-2004-1336

The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0601

distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions...

CVE-2004-1338

The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXECCBKFNDML to add arbitrary functions to the SDOCMTDBKFNTABLE and SDOCMTCBKDMLTABLE, then performing a DELETE on the SDOTXNIDXINSERTS table, which...

CVE-2004-0803

Multiple vulnerabilities in the RLE run length encoding decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files...

CVE-2004-0998

Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code...

CVE-2004-1336

The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-1361

Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow...

Fedora Core 3 : libtiff-3.6.1-8.fc3 (2004-577)

Fix several buffer overflow problems that could be used as an exploit. Fixes the following security advisory: CVE-2004-1308 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

RHEL 2.1 : samba (RHSA-2004:681)

Updated samba packages that fix an integer overflow vulnerability are now available for Red Hat Enterprise Linux 2.1 Samba provides file and printer sharing services to SMB/CIFS clients. Greg MacManus of iDEFENSE Labs has discovered an integer overflow bug in Samba versions prior to 3.0.10. An...

Fedora Core 2 : libtiff-3.5.7-21.fc2 (2004-576)

Fix several buffer overflow problems that could be used as an exploit. Fixes the following security advisory: CVE-2004-1308 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

GLSA-200412-23 : Zwiki: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200412-23 Zwiki: XSS vulnerability Due to improper input validation, Zwiki can be exploited to perform cross-site scripting attacks. Impact : By enticing a user to read a specially crafted wiki entry, an attacker can execute...

Fedora Core 2 : samba-3.0.10-1.fc2 (2004-561)

Fri Dec 17 2004 Jay Fenlason 3.0.10-1.fc2 - New upstream release that closes CVE-2004-1154 bz142544 - Include the -64bit patch from Nalin. This closes bz142873 - Update the -logfiles patch to work with 3.0.10 - Create /var/run/winbindd and make it part of the -common rpm to close bz142242 - move...

RHEL 3 : acroread (RHSA-2004:674)

An updated Adobe Acrobat Reader package that fixes a security issue is now available. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format PDF. iDEFENSE has reported that Adobe Acrobat Reader 5.0.9 contains a buffer overflow...

CVE-2004-1294

The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / slash characters...

CVE-2004-0946

rquotad in nfs-utils rquotaserver.c before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request...

CVE-2004-1138

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as 1 termcap, 2 printdevice, 3 titleold, 4 filetype, 5 syntax, 6 backupext, 7 keymap, 8 patchmode, or 9 langmenu...

CVE-2004-1303

CVE-2004-1303 describes a buffer overflow in the get function of get.c in Yanf 0.4, enabling a remote attacker to execute arbitrary code by sending crafted HTTP responses to the vulnerable service. The NVD entry indicates a network-exploitability with high impact on confidentiality, integrity, an...

CVE-2004-1311

CVE-2004-1311 affects Unix MPlayer 1.0pre5 with an integer overflow in real_setup_and_get_header() in real.c. A Real RTSP streaming media file containing a -1 content-length field can trigger a heap-based buffer overflow, enabling remote denial of service (application crash) and potentially arbit...

CVE-2004-1285

CVE-2004-1285 affects MPlayer 1.0pre5; a buffer overflow in the get_header function in asf_mmst_streaming.c can allow remote attackers to execute arbitrary code via a crafted ASF video stream. Descriptions from NVD/SUSE confirm the vulnerability; exploitation status and specific patches are not d...