CVE-2004-0750

The CVE-2004-0750 issue affects Red Hat’s redhat-config-nfs prior to version 1.0.13, where exporting shares to multiple hosts could yield incorrect permissions and prevent the all_squash option from applying. The root cause is a flaw in redhat-config-nfs that can mishandle permissions on exported...

CVE-2004-0830

The CVE-2004-0830 issue affects the Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange (versions 6.01/6.21 and earlier) and F-Secure Internet Gatekeeper 6.32 and earlier. It stems from an input validation/exception handling error when processing malformed packets sent to the Con...

CVE-2004-0559

CVE-2004-0559 affects Usermin maketemp.pl in versions 1.070 and 1.080, enabling a local user to overwrite arbitrary files at install time through a symlink attack on /tmp/.usermin. The connected documents confirm the affected script and install-time exploitation vector; no explicit remediation de...

CVE-2004-0801

Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands...

CVE-2004-0850

Star before 1.5alpha46 does not drop the effective user ID euid before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program...

CVE-2004-0787

OpenCA is vulnerable to an HTML injection/XSS in its web front end via form input fields. Affected versions are OpenCA 0.9.1-8 and earlier and 0.9.2 RC6 and earlier. The root cause is inadequate validation/ filtering of user input in the web form frontend, allowing injection of HTML/ script throu...

CVE-2004-0904

CVE-2004-0904 : Integer overflow in the BMP decoder can trigger heap-based buffer overflows, enabling remote code execution. Affected products are Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8. Remediation is to apply fixes/updates released after the...

CVE-2004-0875

The CVE-2004-0875 entry concerns PhpGroupWare (aka webdistro) 0.9.16.002 and earlier, where the wiki module is vulnerable to cross-site scripting (XSS). The underlying issue is improper input handling/sanitization in the wiki component, enabling remote attackers to inject arbitrary HTML/script co...

Fedora Core 2 : subversion-1.0.8-1 (2004-318)

This update includes the latest stable release of Subversion, including a security fix for information disclosure bugs in handling of metadata such as log messages in repositories using modauthzsvn for path-based access-control CVE-2004-0749. Note that Tenable Network Security has extracted the...

CVE-2004-0687

CVE-2004-0687 affects OpenMotif (libXpm) with stack-based overflows in xpmParseColors, ParseAndPutPixels, and ParsePixels, allowing remote code execution via malformed XPM images. Evidence in multiple advisories confirms OpenMotif/libXpm as the vulnerable component and that patches/updates exist ...

Fedora Core 2 : httpd-2.0.51-2.7 (2004-313)

Tue Sep 21 2004 Joe Orton 2.0.51-2.7 - aprgetlinecore fix from Rici Lake - Tue Sep 21 2004 Joe Orton 2.0.51-2.6 - fix 2.0.51 regression in Satisfy merging CVE-2004-0811 - Thu Sep 16 2004 Joe Orton 2.0.51-2.5 - modssl: prevent SIGHUP-triggers-SIGSEGV after upgrade from 2.0.50 - revert...

Mandrake Linux Security Advisory : webmin (MDKSA-2004:101)

A vulnerability in webmin was discovered by Ludwig Nussel. A temporary directory was used in webmin, however it did not check for the previous owner of the directory. This could allow an attacker to create the directory and place dangerous symbolic links inside. The updated packages are patched t...

Emulive Server4 Authentication Bypass

The remote host is running EmuLive Server4, a web and media streaming server. There is a flaw in the administrative interface that allows a remote attacker to bypass the authentication procedure by requesting the page '/public/admin/index.htm' directly. An attacker may exploit this flaw to gain...

RHEL 3 : samba (RHSA-2004:467)

Updated samba packages that fix two denial of service vulnerabilities are now available. Updated 23rd September 2004 Packages have been updated to include the ppc64 packages which were left out of the initial errata. Samba provides file and printer sharing services to SMB/CIFS clients. The Samba...

Fedora Core 2 : foomatic-3.0.1-3.1 (2004-303)

Sebastian Krahmer reported a bug in the cupsomatic and foomatic-rip print filters, used by the CUPS print spooler. An attacker who has printing access could send a carefully named file to the print server causing arbitrary commands to be executed as root. The Common Vulnerabilities and Exposures...

CVE-2004-1697

The "Forgot your Password" link in Computer Associates CA Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames...

CVE-2004-1696

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service application crash via a sequence of carriage returns sent to TCP port 66...

CVE-2004-1699

SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service web interface errors via an invalid Skin parameter...

CVE-2004-1695

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / slash...

CDRecords ReadCD - Local Privilege Escalation

CDRecords ReadCD - Local Privilege Escalation !/bin/bash echo "readcd-exp.sh -- ReadCD local exploit Test on cdrecord-2.01-0.a27.2mdk" echo "Author : newbug at chroot.org" echo "Date :09.13.2004" echo "IRC : irc.chroot.org discuss" export READCD=/usr/bin/readcd cd /tmp cat s.c include include int...