8092 matches found
CVE-2004-0605
Non-registered IRC users using 1 ircd-hybrid 7.0.1 and earlier, 2 ircd-ratbox 1.5.1 and earlier, or 3 ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued...
imlib -- xpm heap buffer overflows and integer overflows
Pavel Kankovsky reports: Imlib affected by a variant of CAN-2004-0782 too. I've discovered more vulnerabilities in Imlib 1.9.13. In particular, it appears to be affected by a variant of Chris Evans' libXpm flaw 1 CAN-2004-0782, see http://scary.beasts.org/security/CESA-2004-003.txt. Look at the...
Debian DSA-605-1 : viewcvs - settings not honored
Haris Sehic discovered several vulnerabilities in viewcvs, a utility for viewing CVS and Subversion repositories via HTTP. When exporting a repository as a tar archive the hidecvsroot and forbidden settings were not honoured enough. When upgrading the package for woody, please make a copy of your...
Serendipity compat.php searchTerm Parameter XSS
The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...
CVE-2004-1130
Cross-site scripting XSS vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as 1 username, 2 name, or 3 comments...
CVE-2004-1129
SQL injection vulnerability in 1 fdelmail.asp, 2 addressc.asp, and possibly 3 postmail.asp and 4 fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter...
CVE-2004-0956
CVE-2004-0956 affects MySQL prior to 4.0.20. A remote attacker can cause an application crash/DoS via a MATCH AGAINST query with an opening double quote but no closing quote. Exploitation details are not provided in the documents; multiple advisories (e.g., SUSE, Ubuntu, FreeBSD/OpenVAS entries) ...
CVE-2004-1123
CVE-2004-1123 affects Darwin Streaming Server 5.0.1 (and possibly earlier) where a DESCRIBE request containing a null-byte location may crash the server, causing a denial of service. The vulnerability is remote and unauthenticated, leading to a partial availability impact as noted in the CVSS vec...
CVE-2004-1066
The CVE-2004-1066 issue affects FreeBSD’s procfs (procfs(5)) and linprocfs (linprocfs(5)) on FreeBSD 4.x/5.x. The vulnerability arises from dereferencing a processor argument vector without proper validation when reading /proc/curproc/cmdline (procfs) or /proc/self/cmdline (linprocfs). Impact is ...
CVE-2004-1123
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service server crash via a DESCRIBE request with a location that contains a null byte...
CVE-2004-1066
The cmdline pseudofiles in 1 procfs on FreeBSD 4.8 through 5.3, and 2 linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service panic or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2...
CVE-2004-1128
CVE-2004-1128 is a buffer overflow in CMailCOM.dll of YoungZSoft CMailServer 5.2 that allows remote code execution via an attachment with a long filename. The connected data confirms the vulnerable component and impact (remote arbitrary code execution) but does not provide specific exploit detail...
CVE-2004-0874
CVE-2004-0874 is a reservation duplicate of CVE-2004-1123 and is not the active vulnerability entry; the connected records indicate that the issue affects Darwin Streaming Server 5.0.1 (and possibly earlier) via a DESCRIBE request with a null byte in the location, enabling remote DoS (server cras...
CVE-2004-1129
CVE-2004-1129 affects YoungZSoft CMailServer 5.2. A remote SQL injection is possible in the components fdelmail.asp, addressc.asp, and possibly postmail.asp and fmvmail.asp via the indexOfMail parameter, allowing an attacker to inject arbitrary SQL commands and compromise mail metadata and contac...
CVE-2004-0987
CVE-2004-0987 refers to a buffer overflow in yardradius 1.0.20 (process_menu) that allows remote arbitrary code execution. Debian DSA-598-1 fixes this in yardradius 1.0.20-2woody1 (stable Woody) and 1.0.20-15 (sid). The vulnerability is remote and can give root context; upgrade to the fixed packa...
CVE-2004-1127
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command...
CVE-2004-1127
CVE-2004-1127 corresponds to a buffer overflow in Open DC Hub 0.7.14 that allows a remote attacker with administrator privileges to execute arbitrary code via a long RedirectAll command. Technical entries from connected docs confirm Open DC Hub as the affected software, with the root cause being ...
Mac OS X Multiple Vulnerabilities (Security Update 2004-12-02)
Binary data 2444.prm...