Microsoft WINS Replication Attack (CVE-2004-1080)

...

Security fix for the ALT Linux 6 package cscope version 15.5-alt2

Dec. 1, 2004 Sir Raorn 15.5-alt2 - CAN-2004-0996...

CVE-2004-1771

Scalable OGo SOGo 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users...

Fedora Core 3 : samba-3.0.9-1.fc3 (2004-460)

This update closes two security holes: CVE-2004-0882 and CVE-2004-0930. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora Core 2 : samba-3.0.9-1.fc2 (2004-459)

This update closes two security holes: CVE-2004-0882 and CVE-2004-0930 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

PostNuke pnTresMailer codebrowserpntm.php Traversal Arbitrary File Access

The remote host is running a version of the pnTresMailer PostNuke module which is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote web server, with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network...

EZshopper is still vulnerable against Directory Traversal.

Product: EZshopper Versions: all URL: www.ahg.com Vulnerability: Directory Traversal Date: November 25, 2004 Discovered by: Zero X [email protected] loadpage.cgi of EZshopper allows Directory Traversal Example:...

Mandrake Linux Security Advisory : a2ps (MDKSA-2004:140)

The GNU a2ps utility fails to properly sanitize filenames, which can be abused by a malicious user to execute arbitrary commands with the privileges of the user running the vulnerable application. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Networ...

Debian DSA-598-1 : yardradius - buffer overflow

Max Vozeler noticed that yardradius, the YARD radius authentication and accounting server, contained a stack overflow similar to the one from radiusd which is referenced as CAN-2001-0534. This could lead to the execution of arbitrary code as root. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2004-1029

The vulnerability CVE-2004-1029 affects Sun Java Plug-in in JRE 1.4.2_01, 1.4.2_04, and possibly earlier versions, where data transfer between JavaScript and Java applets fails to restrict access. The root cause is improper isolation that allows a remote attacker to use reflection to access priva...

CVE-2004-0947

CVE-2004-0947 is confirmed across connected docs as a vulnerability in the unarj utility. The issue is a buffer overflow when handling long filenames in arj archives, enabling remote code execution. Related advisories additionally describe a directory-traversal weakness in the -x extract option t...

CVE-2004-1032

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash / characters such that fcronsighup does not properly append the intended fcrontab.sig to the...

CVE-2004-1055

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PmaAbsoluteUri parameter, 2 the zerorows parameter in readdump.php, 3 the confirm form, or 4 an error message generated by the internal...

CVE-2004-0810

The CVE-2004-0810 entry concerns Timbuktu by Netopia (server component) version 7.0.3. A remote buffer overflow can be triggered by sending a crafted data string to multiple concurrent connections on TCP port 407, causing the Timbuktu server process to crash (DoS). The issue arises because the se...

CVE-2004-1021

CVE-2004-1021 affects iCal prior to 1.5.4 on Mac OS X 10.2.3 and later. The underlying issue is that iCal does not alert the user for alarms in calendars, enabling an attacker to cause the execution of programs and sending of email via alarms. The description and public references in the provided...

CVE-2004-1021

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms...

CVE-2004-0947

Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames...

CVE-2004-1055

CVE-2004-1055 covers multiple XSS vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier. The flaws allow remote attackers to inject arbitrary script/html via (1) PmaAbsoluteUri, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal php...

CVE-2004-1030

CVE-2004-1030 : In Fcron, the fcronsighup utility (versions including 2.0.1 and 2.9.4; possibly earlier) can be used by a local user to disclose sensitive information by invoking fcronsighup with an arbitrary file, causing contents of that file to be revealed in error messages. This is an informa...

CVE-2004-0950

CVE-2004-0950 affects Danware NetOp Host (prior to version 7.65 build 2004278). Affected component is the NetOp Host protocol during initial handshake, where an attacker can obtain sensitive information such as the host name, username, and local IP address. The vulnerability arises from informati...