8092 matches found
CVE-2004-0028
CVE-2004-0028 affects jitterbug 1.6.2, where inputs are not properly sanitized, allowing remote authenticated users to execute arbitrary commands on the server hosting the bug-tracking tool. The advisory notes this as a remote vulnerability with potential impact on integrity, confidentiality and ...
CVE-2004-0093
XFree86 4.1.0 is affected by CVE-2004-0093 via the GLX extension and Direct Rendering Infrastructure (DRI). The issue is an out-of-bounds array index that can lead to a denial of service and possibly remote arbitrary code execution. Multiple connected advisories document this as a remote vulnerab...
CVE-2004-0121
Technical details about CVE-2004-0121 are not publicly available in the provided connected documents. The material only restates the issue in Outlook 2002 without specifics. Monitor for updates.
CVE-2004-0165
Format string vulnerability in Point-to-Point Protocol PPP daemon pppd 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges...
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead...
CVE-2004-0033
admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command...
CVE-2004-0336
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory...
CVE-2004-0115
VirtualPCServices in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServicesLog temporary file...
CVE-2004-0099
mksnapffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions...
CVE-2004-0186
CVE-2004-0186 is a local privilege-escalation in Samba (2.x/3.x) on Linux 2.6 where the setuid-smounted utility smbmnt can be exploited: when a setuid root binary is present on a mounted share, a local user can execute it to gain root privileges. The underlying issue is that setuid attributes are...
CVE-2004-0126
The jailattach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail...
CVE-2004-0256
CVE-2004-0256 affects GNU libtool and concerns versions prior to 1.5.2. During compilation, libtool directories created under /tmp can be tricked by a symlink, allowing a local user to overwrite arbitrary files. The documented impact is a local, user-level vulnerability with no remote access requ...
CVE-2004-0307
CVE-2004-0307 affects Cisco ONS platforms (ONS 15327 before 4.1(3); ONS 15454 before 4.6(1); ONS 15454 SD before 4.1(3)). The vulnerability allows remote attackers to trigger a denial-of-service (reset) by manipulating the TCP three-way handshake: not sending the ACK and replying with an invalid ...
CVE-2004-0257
Technical details about CVE-2004-0257 are not publicly provided in the supplied documents. Available records describe a DoS condition via IPv6 MTU-related packets but do not specify affected products, versions, root cause, or mitigations. Monitor for updates.
CVE-2004-0150
The CVE-2004-0150 entry concerns Python 2.2.0–2.2.1 where a buffer overflow in getaddrinfo (with IPv6 support disabled) can permit remote code execution via a DNS-obtained IPv6 address. Affected component: Python's getaddrinfo routine; root cause is improper handling of DNS IPv6 addresses leading...
CVE-2004-0297
IMail LDAP Service Buffer Overflow (CVE-2004-0297) affects Ipswitch IMail Server’s LDAP daemon (iLDAP.exe 3.9.15.10) and can be triggered by a crafted LDAP message with a large tag length, enabling remote code execution or denial of service. Public details describe that the vulnerability arises f...
CVE-2004-0273
CVE-2004-0273 describes a directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop. An attacker can upload arbitrary files via an RMP file containing .. sequences in a .rjs skin file, enabling remote unauthorized file placement. Affected products are...
CVE-2004-0159
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command...
