Mandrake Linux Security Advisory : zlib (MDKSA-2004:090)

Due to a Debian bug report, a Denial of Service vulnerability was discovered in the zlib compression library versions 1.2.x, in the inflate and inflateBack functions. Older versions of zlib are not affected. Once the updated packages have been installed, all programs linked against zlib must be...

Ipswitch IMail Server < 8.13 Multiple Remote DoS

The remote host is running IMail web interface. This version contains multiple buffer overflows. An attacker could use these flaws to remotely crash the service accepting requests from users, or possibly execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Mac OS X Multiple Vulnerabilities (Security Update 2004-09-07)

The remote host is missing Security Update 2004-09-07. This security update fixes the following components : - CoreFoundation - IPSec - Kerberos - libpcap - lukemftpd - NetworkConfig - OpenLDAP - OpenSSH - PPPDialer - rsync - Safari - tcpdump These applications contain multiple vulnerabilities th...

CVE-2004-0822

Buffer overflow in The Core Foundation framework CoreFoundation.framework in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable...

CVE-2004-0823

OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed crypt passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed...

SUSE-SA:2004:030: apache2

The remote host is missing the patch for the advisory SUSE-SA:2004:030 apache2. The modssl apache module, as part of our apache2 package, enables the apache webserver to handle the HTTPS protocol. Within the modssl module, two Denial of Service conditions in the input filter have been found. The...

Mozilla Multiple Browsers CA Certificate SSL Page DoS

The remote host is using Mozilla, an alternative web browser. The Mozilla Personal Security Manager PSM contains a flaw that may permit an attacker to silently import a certificate into the PSM certificate store. This corruption may result in a denial of SSL connections. C Tenable Network Securit...

CVE-2004-1664

Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service game end via a large 1 query or 2 reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430...

CVE-2004-1665

Cross-site scripting XSS vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter...

CVE-2004-1663

Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 formerly FastT 100 and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service freeze and possible data corruption via crafted TCP packets...

CVE-2004-0500

CVE-2004-0500 is a vulnerability in the MSN protocol plugins of Gaim (object.c and slp.c) where a misused strncpy call allows a remote attacker to trigger a buffer overflow. This can lead to a denial of service and may enable remote code execution. The description specifies the affected product a...

CVE-2004-0826

CVE-2004-0826 affects the Netscape Network Security Services (NSS) library’s SSLv2 record parsing. The issue is a heap-based buffer overflow triggered by a modified record length field in an SSLv2 client hello, allowing a remote attacker to execute arbitrary code. Multiple advisories and OpenVAS ...

CVE-2004-0785

CVE-2004-0785 affects Gaim (pre-0.82). The advisory states multiple buffer overflows that allow remote attackers to cause denial of service and potentially execute arbitrary code via (1) RTF messages, (2) an excessively long hostname from DNS, or (3) an overly long URL not properly decoded. Produ...

CVE-2004-0754

CVE-2004-0754 affects Gaim prior to 0.82, where an integer overflow in the Groupware server messages size variable can cause denial of service and may allow arbitrary code execution. The vulnerability is documented across multiple feeds (SUSe/OpenVAS/Gentoo/Gaim advisories) with a base CVSS v2 of...

CVE-2004-0826

Heap-based buffer overflow in Netscape Network Security Services NSS library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message...

CVE-2004-0819

CVE-2004-0819 affects OpenBSD 3.4 and 3.5 when a gateway is configured as a bridging firewall with the link2 option for IPSec enabled. A remote attacker can cause a denial of service (crash) by sending an ICMP echo (ping) packet. The available sources (NVD/CVE records) describe the vulnerability ...

CVE-2004-0784

CVE-2004-0784 affects Gaim before 0.82. The flaw arises in the smiley theme: remote attackers can execute arbitrary commands through shell metacharacters embedded in the tar file name dragged to the smiley selector. Impact is arbitrary command execution with network access and no authentication; ...

CVE-2004-1661

MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."...

CVE-2004-0820

Affected software: Winamp prior to 5.0.5. Vulnerability: remote code execution by parsing a malformed .WSZ (Winamp Skin) file; HTML/ scripts referenced from XML inside the WSZ are executed in the Local Computer Zone. Root cause: improper handling of skin XML/HTML references within WSZ, enabling a...

CVE-2004-0500

Buffer overflow in the MSN protocol plugins 1 object.c and 2 slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call...