CVE-2004-1095

CVE-2004-1095 describes multiple integer overflows in zgv 5.8 image readers (readbmp.c, readgif.c, readmrf.c, readpcx.c, readpng.c, etc.) that allow remote code execution via crafted image headers. Connected advisories identify the same issue across Gentoo/OpenVAS contexts (zgv, GLSA 200411-12; D...

CVE-2004-1102

MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information...

CVE-2004-1109

The CVE-2004-1109 entry concerns the FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier. A crafted TCP, UDP, or ICMP packet with a zero-length IP Option field can trigger an infinite loop, causing CPU consumption and a system freeze (DoS) on vulnerable systems. Affected component: FWDR...

CVE-2004-1073

The openexec function in the execve functionality exec.c in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter PTINTERP functionality...

CVE-2004-1074

The CVE-2004-1074 issue is in the Linux kernel binfmt handling when memory overcommit is enabled. A malformed a.out binary can trigger a local denial of service (kernel oops). The available documents confirm this CVE is referenced in multiple advisories and vulnerability lists, but do not provide...

CVE-2004-1095

Multiple integer overflows in 1 readbmp.c, 2 readgif.c, 3 readgif.c, 4 readmrf.c, 5 readpcx.c, 6 readpng.c,7 readpnm.c, 8 readprf.c, 9 readtiff.c, 10 readxbm.c, 11 readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be...

CVE-2004-1011

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long 1 PROXY or 2 LOGIN command, a different vulnerability than CVE-2004-1015...

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command "bodyp" that is treated as a different command "body.peek" and causes an index increment error that leads to an out-of-bounds memory...

CVE-2004-1104

CVE-2004-1104 details : The connected records confirm a phishing/spoofing flaw in Microsoft Internet Explorer 6.0 SP2 where a web page can manipulate the status bar URL to mislead users. The attack pattern involves a page containing a BASE element pointing to the legitimate site, followed by an a...

CVE-2004-1116

CVE-2004-1116 affects Great Internet Mersenne Prime Search (GIMPS) 23.9 and earlier, where init scripts run user-owned binaries with root privileges. This enables local privilege escalation if a user can modify the programs, as described in NVD, CVE listings, and Gentoo GLSA 200411-26. The OpenVA...

CVE-2004-1079

CVE-2004-1079 is a buffer overflow in nwfs components (ncplogin and ncpmap) of ncpfs 2.2.4 (and possibly earlier/other versions) that may allow a local attacker to gain privileges via a long -T option. The vulnerability is rooted in nwclient.c; it affects the SUID-root utilities ncplogin and ncpm...

CVE-2004-1072

CVE-2004-1072 describes a vulnerability in the Linux kernel where the binfmt_elf loader (binfmt_elf.c) may create an interpreter name string that is not NULL terminated, allowing strings longer than PATH_MAX to be used. This can cause buffer overflows that may lead to a local denial of service (h...

CVE-2004-1074

The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service kernel oops via a malformed a.out binary...

CVE-2004-1111

Cisco IOS 2.218EW, 12.218EWA, 12.214SZ, 12.218S, 12.218SE, 12.218SV, 12.218SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service dropped traffic via multiple...

CVE-2004-0949

CVE-2004-0949 affects the Samba filesystem smbfs in Linux kernel 2.4/2.6, where smb_recv_trans2 fails to reassemble fragmented packets, allowing a remote attacker via the network to read arbitrary kernel information or to inflate a counter by replaying the first fragment. Public advisories (RHSA,...

CVE-2004-1117

CVE-2004-1117 affects ChessBrain: init scripts in ChessBrain 20407 and earlier run user-owned binaries with root privileges, enabling local privilege escalation by modifying those programs. Connected advisories (Gentoo GLSA 200411-26) advise upgrading to the latest packages (e.g., chessbrain >...

CVE-2004-0953

CVE-2004-0953 affects Jabberd (Jabberd 2.x) within the C2S component. The vulnerability is a remote buffer overflow in the C2S/authreg path that handles the username (and realm) without proper length checks, leading to possible denial of service or code execution when a long username is supplied....

CVE-2004-1099

Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1 are affected when EAP-TLS is enabled. They do not properly handle expired or untrusted certificates, allowing remote attackers to bypass authentication a...

CVE-2004-1011

CVE-2004-1011 describes a stack-based overflow in Cyrus IMAP Server 2.2.4–2.2.8 when the imapmagicplus option is enabled. The overflow occurs in handling long PROXY or LOGIN commands, due to copying the username into a small stack buffer without proper length checks, allowing a remote attacker to...

CVE-2004-1008

CVE-2004-1008 affects PuTTY prior to 0.56. An integer signedness error in the ssh2_rdpkt function allows an attacker to trigger a buffer overflow via a crafted SSH2_MSG_DEBUG packet (modified stringlen). This enables remote code execution. Remediation: upgrade PuTTY to 0.56 or newer (patched vers...