8092 matches found
CVE-2004-1105
The CVE-2004-1105 entry concerns Nortel Networks Contivity VPN Client, where the authentication error message varies depending on whether the username is valid, leading to partial information disclosure over a network. The NVD entry documents a Network-level vulnerability with a base score of 5.0...
CVE-2004-1104
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor a element with an empty "href" attribute, and a FORM whose...
CVE-2004-1113
CVE-2004-1113 affects the SQLgrey Postfix greylisting service, specifically versions before 1.2.0. The vulnerability is a SQL injection in which an attacker can cause arbitrary SQL commands to be executed via the (1) sender and (2) recipient e‑mail addresses. The root cause is untrusted input bei...
CVE-2004-1114
CVE-2004-1114 : Affected software is Skype for Windows, versions 1.0.x.94–1.0.x.98. The issue is a buffer overflow in the handling of command line arguments, triggered by a long non-existent username in a callto:// URL. This could allow remote attackers to execute arbitrary code. The CVE is disti...
CVE-2004-1103
CVE-2004-1103 affects MailPost 5.1.1sv (and possibly earlier) when debug mode is enabled. The vulnerability allows remote attackers to retrieve sensitive information via the debug parameter, revealing details such as the web root path and the web server version. According to NVD, the impact is pa...
CVE-2004-0883
CVE-2004-0883 concerns multiple vulnerabilities in the Samba filesystem (smbfs) within the Linux kernel (versions 2.4 and 2.6). The description states that remote Samba servers could cause a denial of service (kernel crash) or information disclosure by triggering one of several flawed packet-hand...
CVE-2004-1094
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using 1 a .rjs skin file in RealPlayer 10 through RealPlayer 10.5 6.0.12.1053, RealOne Playe...
CVE-2004-1069
CVE-2004-1069 describes a race condition affecting SELinux-enabled Linux kernels in the 2.6.x series (through 2.6.9) when handling AF_UNIX network packets. Local attackers could cause a kernel DoS (kernel crash) via SOCK_SEQPACKET Unix domain sockets due to improper handling in sock_dgram_sendmsg...
CVE-2004-1098
CVE-2004-1098 affects MIME-tools (v5.414) used by MIMEDefang. The vulnerability arises from an empty boundary string in the Content-Type header, which lets a virus-infected attachment bypass some antivirus scanning. Impact is bypass of virus detection; published advisories reference MIME-tools an...
CVE-2004-1108
CVE-2004-1108 affects Gentoo: Gentoo Portage (dispatch-conf) and Gentoolkit’s qpkg query tool, with the vulnerable component being temporary file handling. Gentoolkit 0.2.0_pre10 and earlier uses predictable names in the temporary directory, enabling a local attacker to create a symlink to a targ...
CVE-2004-1075
Summary: CVE-2004-1075 describes a cross-site scripting (XSS) vulnerability in Zwiki. In Zwiki versions after 0.10.0rc1 up to 0.36.2, an attacker can inject arbitrary HTML/script via a malformed URL, which is not properly cleansed when generating an error message. Connected advisories corroborate...
CVE-2004-1352
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code...
CVE-2004-1008
Integer signedness error in the ssh2rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2MSGDEBUG packet with a modified stringlen parameter, which leads to a buffer overflow...
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011...
CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-1101
The CVE-2004-1101 entry concerns MailPost 5.1.1sv (and possibly earlier) and documents three issues: (1) remote denial of service causing a server crash, (2) leakage of sensitive pathname information in error messages, and (3) a cross-site scripting (XSS) vector triggered by an HTTP request conta...
CVE-2004-1073
The CVE-2004-1073 entry affects the Linux kernel (2.4.x up to 2.4.27 and 2.6.x up to 2.6.8). It is caused by the open_exec path of the execve functionality (exec.c), where the interpreter (PT_INTERP) handling can allow local users to read non-readable ELF binaries. The description specifies local...
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...