CVE-2004-1115

The init scripts in Search for Extraterrestrial Intelligence SETI project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs...

CVE-2004-1112

The buffer overflow trigger in Cisco Security Agent CSA before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute...

CVE-2004-0953

Buffer overflow in the C2S module in the open source Jabber 2.x server Jabberd allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a long username...

CVE-2004-1101

mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service server crash, leak sensitive pathname information in the resulting error message, and execute a cross-site scripting XSS attack via an HTTP request that contains a / backslash and...

CVE-2004-1097

Format string vulnerability in the cherokeeloggerncsawritestring function in Cherokee 0.4.17 and earlier, when authenticating via authpam, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via format string specifiers in the URL...

CVE-2004-1013

CVE-2004-1013 affects Cyrus IMAP Server 2.2.x–2.2.8. The argument parser for FETCH can be exploited by remote authenticated users through commands such as body[p or binary[p, triggering an index increment error that causes out-of-bounds memory corruption and allows arbitrary code execution. The v...

CVE-2004-1100

The CVE-2004-1100 entry documents a cross-site scripting (XSS) flaw in MailPost 5.1.1sv (and possibly earlier versions) where, when debug mode is enabled, an attacker can inject arbitrary web script or HTML via the append parameter. The data here do not include a published fix or patch within the...

CVE-2004-1094

CVE-2004-1094 concerns a buffer overflow in InnerMedia DynaZip DUNZIP32.dll (version 5.00.03 and earlier) that enables remote code execution when a crafted ZIP with a long filename is processed. Affected products include RealPlayer 10 / RealOne Player and various third‑party apps (e.g., CheckMark...

CVE-2004-1070

Technical details (affected kernel versions, vulnerable component, impact, or remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2004-1118

CVE-2004-1118 affects the WodFtpDLX.ocx (WeOnlyDo!) ActiveX control before version 2.3.2.97, used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10 (and possibly other apps). A buffer overflow in the ActiveX component allows remote code execution via a long filename. Exploitation d...

CVE-2004-1119

Stack-based buffer overflow in INCDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file...

CVE-2004-1115

The CVE-2004-1115 entry corresponds to a real vulnerability in SETI project 3.08-r3 and earlier where init scripts execute user-owned programs with root privileges, enabling local privilege escalation by modifying those programs. Connected sources provide concrete details: Gentoo GLSA 200411-26 n...

CVE-2004-1071

The CVE-2004-1071 issue affects the Linux kernel’s binfmt_elf loader (binfmt_elf.c) in kernels 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8. A failed mmap is not handled correctly, leading to an incorrectly mapped image and potential local code execution by unauthorized users. The connected SUSE advi...

CVE-2004-1096

Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system...

CVE-2004-1110

The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...

CVE-2004-1013

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as 1 "bodyp", 2 "binaryp", or 3 "binaryp" that cause an index increment error that leads to an out-of-bounds memory corruption...

CVE-2004-1118

Buffer overflow in the WodFtpDLX.ocx WeOnlyDo! ActiveX component before 2.3.2.97, as used by CoffeeCup Direct FTP 6.2.0.62 and CoffeeCup Free FTP 3.0.0.10, and possibly other applications, allows remote attackers to execute arbitrary code via a long filename...

CVE-2004-1011

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

CVE-2004-1068

CVE-2004-1068 involves a missing serialization flaw in the unix_dgram_recvmsg path of Linux kernels 2.4.27 and earlier, and 2.6.x up to 2.6.9. The issue enables local users to potentially gain privileges due to a race condition. The description explicitly states the vulnerability is a local privi...

CVE-2004-1008

Integer signedness error in the ssh2rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2MSGDEBUG packet with a modified stringlen parameter, which leads to a buffer overflow...