CVE-2004-0849

The CVE-2004-0849 issue affects GNU Radius radiusd (versions 1.1 and 1.2 prior to 1.2.94) where an integer overflow in asn_decode_string() (snmplib/asn1.c) can crash the daemon via crafted SNMP requests when built with --enable-snmp. The vulnerability is triggered by very large unsigned values in...

CVE-2004-0534

Cross-site scripting XSS vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document...

CVE-2004-0747

CVE-2004-0747 describes a local buffer overflow in Apache HTTP Server versions 2.0.50 and earlier, triggered by expansion of environment variables in .htaccess or server configuration files. The underlying issue involves copying environment data into a fixed-size buffer (ap_resolve_env) via strin...

CVE-2004-0849

Integer overflow in the asndecodestring function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service daemon crash via certain SNMP requests...

CVE-2004-0799

Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 are affected by a vulnerability in the HTTP daemon where processing a GET request containing an MS-DOS device name (notably prn.htm) triggers an unhandled exception, causing the web server component to crash and resulting in a denial of service. The is...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

CVE-2004-0782

Integer overflow in pixbufcreatefromxpm io-xpm.c in the XPM image decoder for gtk+ 2.4.4 gtk2 and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain ncol and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+...

CVE-2004-0753

The BMP image processor for 1 gdk-pixbuf before 0.22 and 2 gtk2 before 2.2.4 allows remote attackers to cause a denial of service infinite loop via a crafted BMP file...

SUSE-SA:2004:034: XFree86-libs, xshared

The remote host is missing the patch for the advisory SUSE-SA:2004:034 XFree86-libs, xshared. Chris Evans reported three vulnerabilities in libXpm which can be exploited remotely by providing malformed XPM image files. The function xpmParseColors is vulnerable to an integer overflow and a...

Fedora Core 2 : apr-util-0.9.4-14.2 (2004-308)

Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an input validation issue in the IPv6 URI parsing routines in the apr-util library. If a remote attacker sent a request including a carefully crafted URI, an httpd child...

Mac OS X iChat Link Handling Arbitrary Command Execution (Security Update 2004-09-16)

The remote host is missing Security Update 2004-09-16. This security update is for iChat. There is a bug in older versions of iChat where an attacker may execute commands on the local system by sending malformed links which will execute local commands to an iChat user on the remote host. C Tenabl...

Fedora Core 1 : apr-util-0.9.4-2.1 (2004-307)

Testing using the Codenomicon HTTP Test Tool performed by the Apache Software Foundation security group and Red Hat uncovered an input validation issue in the IPv6 URI parsing routines in the apr-util library. If a remote attacker sent a request including a carefully crafted URI, an httpd child...

CVE-2004-0801

Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands...

CVE-2004-1687

CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter...

CVE-2004-1688

Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service infinite loop and CPU consumption via a long login name sent to port 3103...

CVE-2004-1689

sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...

BELL-CVE-2004-0809 CVE-2004-0809 does not affect BellSoft software

Bulletin has no description...

CVE-2004-0872

Opera does not prevent cookies that are sent over an insecure channel HTTP from also being sent over a secure channel HTTPS/SSL in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."...

Mandrake Linux Security Advisory : XFree86 (MDKSA-2004:099)

Chris Evans found several stack and integer overflows in the libXpm code of X.Org/XFree86 : Stack overflows CVE-2004-0687 : Careless use of strcat in both the XPMv1 and XPMv2/3 xpmParseColors code leads to a stack based overflow parse.c. Stack overflow reading pixel values in ParseAndPutPixels...

CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setupstatus.htm or status.HTM pages...