CVE-2004-1231

Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. dot dot sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype...

CVE-2004-1025

Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service application crash and execute arbitrary code via certain image files...

CVE-2004-1227

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. dot dot sequences in the 1 module, 2 action, or 3 theme parameters to index.php, 4 the theme parameter to Login.php, and...

CVE-2004-1213

The CVE-2004-1213 entry concerns an XSS vulnerability in the index.php of Advanced Guestbook versions 2.3.1, 2.2, and potentially other releases. The issue allows remote attackers to inject arbitrary web scripts or HTML via the entry parameter. The description provided with the CVE states the vul...

CVE-2004-1227

CVE-2004-1227 affects SugarCRM Sugar Sales 2.0.1c and earlier. The vulnerability is a directory traversal flaw allowing remote attackers to read arbitrary files and potentially execute PHP code via dot-dot sequences in several parameters to index.php and Login.php (and possibly other scripts). Ro...

CVE-2004-1233

CVE-2004-1233 concerns Gadu-Gadu’s DCC file transfer capability: an integer overflow in processing a user packet with an invalid file length. This leads to denial of service (disk consumption) when the vulnerable component handles DCC file transfers. Affected software is Gadu-Gadu; the exact vers...

CVE-2004-1197

CVE-2004-1197 is an XSS vulnerability in Insite InShop (inshop.pl) where the screen parameter can be abused to inject arbitrary script/HTML. Nessus details additionally note an input-validation error in inshop.pl (screen argument) and inmail.pl (acao argument) enabling cross-site scripting and po...

CVE-2004-0994

CVE-2004-0994 affects xzgv version 0.8 and earlier, where multiple integer overflows in read_prf_file can cause a heap-based buffer overflow when images have large width/height. This is described as enabling remote code execution. The entry notes the bugs for CVE-2004-0994 and CVE-2004-1095 are d...

CVE-2004-1215

Kreed 1.05 and earlier is affected by CVE-2004-1215, where remote attackers can cause a denial of service (server disconnect) by sending a long UDP packet that triggers a "message too long" socket error. The public records identify the affected software and the exact failure condition, but they d...

CVE-2004-1192

CVE-2004-1192 is a format-string vulnerability in Citadel/UX’s lprintf() on version 6.27 and earlier that allows remote attackers to execute arbitrary code by sending format specifiers to the server. Reported impact is complete confidentiality, integrity, and availability compromise with high sev...

CVE-2004-1214

CVE-2004-1214 describes a format string vulnerability in Kreed 1.05 and earlier. The flaw allows remote attackers to execute arbitrary code via format specifiers in either a user’s nickname or their message text. The vulnerability is identified in multiple sources (NVD/CVE databases) with a high ...

CVE-2004-1217

CVE-2004-1217 affects Hosting Controller 6.1 Hotfix 1.4 (and possibly other versions). The vulnerability arises in the FilePath parameter passed to Statsbrowse.asp and Generalbrowse.asp, enabling remote attackers to view arbitrary directories on the affected server. Root cause is improper handlin...

CVE-2004-1229

Technical details about CVE-2004-1229 are not publicly provided in the connected documents. The initial description mentions XSS via http:// or news:// URLs in Gadu-Gadu, but no further specifics are given here. Monitor for updates.

CVE-2004-1222

weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter...

CVE-2004-1205

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message...

CVE-2004-1191

The CVE-2004-1191 entry concerns a race condition in SuSE Linux releases 8.1–9.2 when run on SMP systems with more than 4 GB of memory. The issue could allow a local user to read unauthorized memory from “foreign memory pages.” The root cause, as described, is a race condition affecting memory ha...

CVE-2004-1173

Internet Explorer 6 contains a vulnerability where remote attackers can bypass the popup blocker using DOM methods in the DHTML Editing Component (DEC) and showModalDialog calls. Root cause: the DHTML Editing Component/DEC enables a bypass via its DOM API. Impact described as bypassing the popup ...

CVE-2004-1173

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model DOM methods in the DHTML Dynamic HTML DHTML Editing Component DEC and Javascript that calls showModalDialog...

CVE-2004-1148

phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sqllocalfile parameter...

CVE-2004-0568

HyperTerminal for Windows NT 4.0/2000/XP/Server 2003 contains a buffer overflow in session file handling due to improper validation of a value’s length. This allows a remote attacker to execute arbitrary code when a user opens a malicious HyperTerminal session file (.ht), or follows a web/Telnet ...