8092 matches found
CVE-2004-0276
The getrealstring function in Monkey HTTP Daemon monkeyd 0.8.1 and earlier allows remote attackers to cause a denial of service crash via an HTTP request with a sequence of "%" characters and a missing Host field...
CVE-2004-0305
Cross-site scripting XSS vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Messageid parameter...
CVE-2004-0244
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...
CVE-2004-0270
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...
CVE-2004-0289
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service segmentation fault via a database file that contains a large key parameter...
CVE-2004-0296
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection...
CVE-2004-0327
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...
CVE-2004-0329
FreeChat 1.1.1a allows remote attackers to cause a denial of service crash via certain unexpected strings, as demonstrated using "aaaaa"...
CVE-2004-0744
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service memory and resource consumption via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet...
CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x modphp can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information...
CVE-2004-0360
Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...
CVE-2004-0599
Multiple integer overflows in the 1 pngreadpng in pngread.c or 2 pnghandlesPLT functions in pngrutil.c or 3 progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service application crash via a malformed PNG image...
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. dot dot sequences in a .rjs skin file...
CVE-2004-0279
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
CVE-2004-0290
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large 1 battle type and 2 map name fields...
CVE-2004-0317
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service segmentation fault and possibly execute arbitrary code via a long LSFFromPC parameter...
CVE-2004-0326
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request...
CVE-2004-0328
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system...
CVE-2004-0340
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long 1 LIST, 2 NLST, or 3 STAT commands...