CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...

CVE-2004-0307

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, and ONS 15454 SD before 4.13 allows remote attackers to cause a denial of service reset by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead...

CVE-2004-0312

Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2...

CVE-2004-0339

Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...

CVE-2004-0344

Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. dot dot in the attachOld parameter...

CVE-2004-0346

Off-by-one buffer overflow in xlateasciiwrite in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0361

The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service segmentation fault by creating a new Array object with a large size value, then writing into that array...

CVE-2004-0743

Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak...

CVE-2004-0598

The pnghandleiCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service application crash via a certain PNG image that triggers a null dereference...

CVE-2004-0494

Multiple extfs backend scripts for GNOME virtual file system VFS before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-0252

TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service CPU consumption via an empty USER name...

CVE-2004-0306

Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS 15600 before 1.30 enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories...

CVE-2004-0337

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

CVE-2004-0360

Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...

CVE-2004-0494

Multiple extfs backend scripts for GNOME virtual file system VFS before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI...

CVE-2004-0245

Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service crash by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero...