CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0082

The mksmbpasswd shell script mksmbpasswd.sh in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password...

CVE-2004-0078

Affected software: Mutt up to version 1.4.1 and earlier. Root cause: buffer overflow in the index menu code (menu_pad_string in menu.c). Impact: remote denial of service (crash) and possible arbitrary code execution via certain mail messages. Evidence: CVE-2004-0078 references across multiple adv...

CVE-2004-0094

Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure DRI...

CVE-2004-0044

Cisco Personal Assistant 1.4(1) and 1.4(2) are affected. The issue arises when the product’s configuration uses the Corporate Directory settings tied to Cisco CallManager’s directory service and the setting “Allow Only Cisco CallManager Users” is enabled; this causes password authentication to be...

CVE-2004-0193

CVE-2004-0193 describes a heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) used by RealSecure/BlackICE products. An SMB authentication request with a long username allows a remote attacker to execute arbitrary code. Affected: RealSecure Network 7.0 and Server Sensor 7.0, Prove...

CVE-2004-0004

Affects OpenCA : OpenCA 0.9.1.6 and earlier use crypto-utils.lib’s libCheckSignature, which compares only the certificate serial to the database entry. This can allow a signature to be accepted if the signer's certificate chain is trusted by OpenCA’s chain directory, enabling an attacker to spoof...

CVE-2004-0160

CVE-2004-0160 affects the synaesthesia package. The vulnerability allows a local unprivileged user to cause configuration-file creation/modification with root ownership via a symlink attack on the config file, enabling potential code execution with root privileges. Debian and OpenVAS advisories d...

CVE-2004-0126

CVE-2004-0126 affects FreeBSD jail_attach(2) in FreeBSD 5.1–5.2. A programming error caused the process to change its root directory even if the process lacked permission, allowing a superuser inside a jail to set its root to another jail and gain full read/write access to files and directories w...

CVE-2004-0075

The CVE-2004-0075 issue affects the Linux kernel's Vicam USB driver prior to 2.4.25. The vulnerability arises because data copied from userspace to kernel space does not use copy_from_user, crossing security boundaries and enabling a local attacker to cause a denial of service. Public advisories ...

CVE-2004-0185

CVE-2004-0185 describes a buffer overflow in wu-ftpd’s S/KEY authentication path (skey_challenge in ftpd.c) for version 2.6.2, allowing remote code execution or denial-of-service via a long s/key name. Connected records corroborate a remote overflow vulnerability in Wu-FTPd with S/KEY support, an...

CVE-2004-0171

The CVE-2004-0171 issue affects FreeBSD 5.1 and earlier and Mac OS X before 10.3.4. It stems from the TCP reassembly queue not limiting the number of out-of-sequence segments, allowing remote attackers to exhaust memory mbufs and crash the system (denial of service) by sending a flood of out-of-s...

CVE-2004-0336

The CVE-2004-0336 issue affects LAN SUITE Web Mail 602Pro, where a vulnerability in the mail login form allows remote attackers to obtain the path to the mail directory, exposing sensitive information. The core cause is disclosure of internal file paths via the login interface. Impact is informat...

CVE-2004-0193

Heap-based buffer overflow in the ISS Protocol Analysis Module PAM, as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Serv...

CVE-2004-0191

Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page zombie document and enable cross-domain and cross-site scripting XSS attacks, as demonstrated using onmousemove events...

CVE-2004-0185

Buffer overflow in the skeychallenge function in ftpd.c for wu-ftp daemon wu-ftpd 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key SKEY request with a long name...

CVE-2004-0077

The domremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the domunmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different...

CVE-2004-0347

Cross-site scripting XSS vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 build 4797 allows remote authenticated users to execute arbitrary script as other users via the row parameter...

CVE-2004-0309

CVE-2004-0309 is a stack-based buffer overflow in the SMTP service support (vsmon.exe) used by Zone Labs ZoneAlarm (before 4.5.538.001) and ZoneLabs Integrity client (before 4.0.146.046 and 4.5.085). The vulnerability exists in the SMTP protocol processing function and can be triggered by long RC...

CVE-2004-0033

PHPGEDVIEW 2.61’s admin.php is vulnerable to information disclosure: an attacker can trigger a phpinfo command via an action parameter to reveal sensitive data. The affected component is admin.php (PHPGEDVIEW 2.61). Root cause is improper handling of the action parameter, enabling remote code/inf...