CVE-2004-0992

Format string vulnerability in the -a option daemon mode in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer...

CVE-2004-0935

CVE-2004-0935 affects Eset Anti-Virus prior to 1.020. A ZIP archive with both local and global headers set to zero could bypass antivirus protection and allow a malicious file to be opened on the target system. PoC/proofs of concept code and advisories (e.g., iDEFENSE CAN references) document det...

CVE-2004-0917

CVE-2004-0917 affects Vignette Application Portal. The default installation exposes an unauthenticated diagnostic utility accessible at /portal/diag (and related paths), enabling remote attackers to disclose sensitive information about the server, OS version, database parameters, and Vignette con...

CVE-2004-0982

Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ at sign in a URL...

CVE-2004-0916

cabextract versions prior to 1.1 are affected by a directory traversal vulnerability that allows remote attackers to overwrite arbitrary files via cabinet files containing ".." in a filename. The flaw is described consistently across CVE-2004-0916 entries (NVD and OSV), indicating that untrusted ...

CVE-2004-0882

Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2QFILEPATHINFO request with a small "maximum data bytes" value...

CVE-2004-0930

CVE-2004-0930 affects Samba 3.0.4, 3.0.7 (and possibly other versions). The issue is in the ms_fnmatch function, allowing remote authenticated users to cause high CPU denial of service via a SAMBA request containing multiple asterisks (*) in the wildcard pattern. The provided documents confirm th...

Ipswitch IMail IMAP Service DELETE Command Remote Overflow

The remote host is running a version of Ipswitch IMail that is older than version 8.14.0. The remote version of this software is vulnerable to a buffer overflow when it processes the argument of the 'delete' command. An attacker may exploit this flaw to execute arbitrary code on the remote host. ...

Mandrake Linux Security Advisory : samba (MDKSA-2004:136)

Steffan Esser discovered that invalid bounds checking in reply to certain trans2 requests could result in a buffer overrun in smbd. This can only be exploited by a malicious user able to create files with very specific Unicode filenames on a samba share. The updated packages have been patched to...

CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many 1 ! exclamation or 2 @ at sign characters...

CVE-2004-1052

CVE-2004-1052: A buffer overflow in the getnickuserhost function of BNC (notably version 2.8.9 and possibly older/newer variants) can be triggered by an IRC server response containing a sequence of many ! or @ characters, allowing remote code execution. Public sources (NVD entry and security advi...

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

CVE-2004-1051

Technical details about CVE-2004-1051 are not publicly available in the provided documents. Monitor for updates as new information may be published.

CVE-2004-1051

sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname...

CVE-2004-1050

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long 1 SRC or 2 NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."...

Fedora Core 3 : xorg-x11-6.8.1-12.FC3.1 (2004-434)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Fedora Core 2 : xorg-x11-6.7.0-10 (2004-433)

Several integer overflow flaws in the X.Org libXpm library used to decode XPM X PixMap images have been found and addressed. An attacker could create a carefully crafted XPM file which would cause an application to crash or potentially execute arbitrary code if opened by a victim. The Common...

Debian DSA-592-1 : ez-ipupdate - format string

Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in ez-ipupdate, a client for many dynamic DNS services. This problem can only be exploited if ez-ipupdate is running in daemon mode most likely with many but not all service types. %NASLMINLEVEL 70300 C...

Mandrake Linux Security Advisory : sudo (MDKSA-2004:133)

Liam Helmer discovered a flow in sudo's environment sanitizing. This flaw could allow a malicious users with permission to run a shell script that uses the bash shell to run arbitrary commands. The problem is fixed in sudo 1.6.8p2; the provided packages have been patched to correct the issue...

Mandrake Linux Security Advisory : apache2 (MDKSA-2004:135)

A vulnerability in apache 2.0.35-2.0.52 was discovered by Chintan Trivedi; he found that by sending a large amount of specially- crafted HTTP GET requests, a remote attacker could cause a Denial of Service on the httpd server. This vulnerability is due to improper enforcement of the field length...