CVE-2004-0276

The CVE-2004-0276 entry concerns Monkey HTTP Daemon (monkeyd) versions up to and including 0.8.1. The vulnerability is in the get_real_string function, where processing an HTTP request containing a sequence of "%" characters and a missing Host header can cause the daemon to crash, resulting in a ...

CVE-2004-0011

CVE-2004-0011 concerns a buffer overflow in fsp (File Service Protocol client utilities) prior to version 2.81.b18, enabling remote code execution. The issue affects the fsp component and is repeatedly referenced in Debian (DSA-416), FreeBSD/ VuXML entries, and OpenVAS advisories, which document ...

CVE-2004-0188

Calife (affected: 2.8.5 and earlier) contains a heap-based buffer overflow that could allow a local user to execute arbitrary code via a long password. Debian’s advisory DSA-461-1 documents this issue and indicates a security update is required for Calife packages; OpenVAS entry confirms the Debi...

CVE-2004-0075

The Vicam USB driver in Linux before 2.4.25 does not use the copyfromuser function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service...

CVE-2004-0078

Buffer overflow in the index menu code menupadstring of menu.c for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain mail messages...

CVE-2004-0297

Buffer overflow in the Lightweight Directory Access Protocol LDAP daemon iLDAP.exe 3.9.15.10 in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service crash and execute arbitrary code via an LDAP message with a large tag length...

CVE-2004-0261

oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter...

CVE-2004-0089

Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable...

CVE-2004-0189

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass urlregex ACLs via a URL with a NULL "%00" character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists...

CVE-2004-0194

CVE-2004-0194 affects Adobe Acrobat Reader 5.1. It is a stack-based buffer overflow in the OutputDebugString function triggered by a PDF containing XFDF data, enabling remote code execution. The vulnerability has a CVSS base score of 7.5 (Network, Low attack complexity, no authentication required...

CVE-2004-0049

RealNetworks Helix Server/Proxy 9 and Helix Mobile Server 10 are affected by a buffer overflow in the Administration Interface over HTTP. An authenticated user can submit malformed HTTP POST requests to trigger code execution on the server. Affected versions include Helix Universal Server/Gateway...

CVE-2004-0089

CVE-2004-0089 describes a buffer overflow in TruBlueEnvironment, part of the Mac OS X Classic environment, on Mac OS X 10.3.x and 10.2.x. The vulnerability occurs when TruBlueEnvironment copies a long environment variable without proper bounds checking, allowing a local, authenticated user to exe...

CVE-2004-0095

The vulnerability CVE-2004-0095 affects the McAfee ePolicy Orchestrator agent. It stems from improper handling of HTTP POST Content-Length values, potentially allowing a buffer overflow that can lead to memory consumption, denial of service, and possibly arbitrary code execution. Affected compone...

CVE-2004-0094

CVE-2004-0094 concerns XFree86 4.1.0 with integer signedness errors in the GLX extension/DRI. Remote attackers could cause a denial of service and potentially execute arbitrary code by sending crafted data to the X server. Related advisories (e.g., Debian DSA-443-1, Red Hat RHSA-2004:152, SUSE) d...

CVE-2004-0115

The CVE-2004-0115 issue affects Microsoft Virtual PC for Mac 6.0–6.1. The setuid VirtualPC_Services creates a temporary log file (/tmp/VPCServices_Log) without proper checks, enabling a local attacker with valid logon to create a symlink that leads to truncation/overwriting of arbitrary files and...

CVE-2004-0045

Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code...

CVE-2004-0111

gdk-pixbuf before 0.20 allows attackers to cause a denial of service crash via a malformed bitmap BMP file...

CVE-2004-0256

GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0113

Memory leak in sslengineio.c for modssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service memory consumption via plain HTTP requests to the SSL port of an SSL-enabled server...