8092 matches found
PHP Live! directory/conf File Include Unspecified Issue
The remote host is running PHP Live! a live support system for websites. The remote version of this software contains an unspecified flaw that could allow an attacker to include a configuration file hosted on a third-party server. An attacker may exploit this flaw to execute arbitrary PHP code on...
CVE-2004-1136
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service application crash via large replies to FTP commands...
CVE-2004-0770
CVE-2004-0770 affects romload.c in DGen Emulator 1.23 and earlier. The vulnerability arises during decompression of ROM files compressed with gzip or bzip, where a symlink attack on temporary files enables a local attacker to overwrite arbitrary files. Impact is local file overwrite; no exploit d...
CVE-2004-1133
CVE-2004-1133 describes multiple remote vulnerabilities in Microsoft W3Who ISAPI (w3who.dll): two XSS flaws and a buffer overflow. OpenVAS/Nessus details indicate the w3who.dll ISAPI may allow an attacker to execute arbitrary commands on affected Windows hosts via a buffer overflow, or mount XSS ...
CVE-2004-1014
CVE-2004-1014 affects statd in nfs-utils 1.257 and earlier, where SIGPIPE is not ignored, allowing a remote attacker to trigger a denial-of-service (server crash) via a prematurely terminated TCP connection. The OpenVAS, Ubuntu USN-36-1, Debian DSA 606-1, Gentoo GLSA 200412-08, and Red Hat RHSA-2...
CVE-2004-1076
CVE-2004-1076 affects Atari800 (before 1.3.4): multiple buffer overflows in RtConfigLoad (rt-config.c) allow a local user to execute arbitrary code via oversized values in the configuration file. Debian/SUSE advisories confirm local-exploitability with potential root gain in some builds. The issu...
CVE-2004-0890
CVE-2004-0890 is a rejected candidate; this CVE ID is not used and does not represent an active vulnerability entry.
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...
CVE-2004-1135
CVE-2004-1135 affects Ipswitch WS_FTP Server 5.03. A buffer overflow in the MKD (and related) FTP commands can crash the service (DoS) and, per advisories, may allow code execution with SYSTEM privileges. Exploit activity is documented (Metasploit module for WS_FTP 5.03 MKD overflow; MITRE CVE en...
CVE-2004-1063
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safemodeexecdir restrictions and execute commands outside of the intended safemodeexecdir via shell metacharacters in the current directory name. NOTE: this issue was...
CVE-2004-1136
CVE-2004-1136 affects CuteFTP Professional 6.0 (and possibly other versions). The vulnerability is a buffer overflow in the FTP command/response handling that occurs when the client processes large replies from an FTP server, enabling a remote server to trigger a denial of service (application cr...
CVE-2004-1064
CVE-2004-1064 affects PHP 4.x up to 4.3.9 and PHP 5.x up to 5.0.2, where safe mode checks truncate the file path before feeding data to realpath, enabling a bypass of safe mode. The vulnerability is a path-length-related bypass of restriction checks, potentially allowing unauthorized access or ex...
CVE-2004-1135
Multiple buffer overflows in WSFTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service service crash via long 1 SITE, 2 XMKD, 3 MKD, and 4 RNFR commands...
CVE-2004-1076
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file...
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service server process crash via a TCP connection that is prematurely terminated...
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...
CVE-2004-1063
CVE-2004-1063 affects PHP 4.x up to 4.3.9 and PHP 5.x up to 5.0.2 when running in safe mode on multithreaded Unix webservers. It allows local users to bypass safe_mode_exec_dir restrictions and run commands outside the intended directory by using shell metacharacters in the current directory name...
CVE-2004-1151
CVE-2004-1151 involves multiple buffer overflows in the Linux 2.6.x kernel, specifically in sys32_ni_syscall() and sys32_vm86_warning() within sys_ia32.c. Exploitation could allow a local attacker to modify kernel memory and escalate privileges (root). Several advisories confirm affected kernels ...
CVE-2004-1134
CVE-2004-1134 covers a stack/ buffer overflow in the Microsoft IIS ISAPI w3who.dll (W3Who) triggered by long query strings. The root cause is lack of input sanitization for CGI variables, enabling remote attackers to cause denial of service and potentially execute arbitrary code with IIS privileg...