CVE-2004-0160

Removed by vendor...

CVE-2004-0082

The mksmbpasswd shell script mksmbpasswd.sh in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password...

CVE-2004-0189

CVE-2004-0189 concerns a bug in the URL decoding '%xx' function in Squid 2.5.STABLE4 and earlier that can inject a NULL character into decoded URLs, causing Squid to compare only a portion of the requested URL against ACLs. This can allow bypass of url_regex-based access control lists. Public dis...

CVE-2004-0082

CVE-2004-0082 affects Samba 3.0.0 and 3.0.1. When creating an account with the account marked as disabled, the mksmbpasswd.sh script may overwrite the user password with data from an uninitialized buffer, potentially allowing the account to be accessed with a guessable password. The issue arises ...

CVE-2004-0169

CVE-2004-0169 concerns QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2. The vulnerability arises when processing RTSP DESCRIBE requests with overly long User-Agent fields, triggering an Assert in BufferIsFull and potentially crashing the server. Multiple sources corroborate that remote at...

CVE-2004-0111

CVE-2004-0111 affects gdk-pixbuf prior to 0.20; processing a malformed BMP can crash the application (denial of service). Debian/Red Hat advisories confirm a fix in newer gdk-pixbuf releases (e.g., RHSA-2004:103 recommends upgrading to a non-vulnerable version such as 0.22). The issue arises in t...

CVE-2004-0306

CVE-2004-0306 affects several Cisco ONS platforms (ONS 15327 prior to 4.1(3); ONS 15454 prior to 4.6(1); ONS 15454 SD prior to 4.1(3); Cisco ONS 15600 prior to 1.3(0)) where TFTP is enabled on UDP port 69 by default. This allows remote attackers to GET or PUT ONS system files on the current activ...

CVE-2004-0356

CVE-2004-0356: A stack-based buffer overflow in the Supervisor Report Center of SL Mail Pro 2.0.9 and earlier allows remote code execution via an HTTP request containing a long HTTP sub-version. Affects SL Mail Pro up to version 2.0.9; exploitation details are not provided in the connected docume...

CVE-2004-0129

Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. dot dot sequences in the what parameter...

CVE-2004-0270

libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service crash via a uuencoded e-mail message with an invalid line length e.g., a lowercase character, which causes an assert error in clamd that terminates the calling program...

CVE-2004-0270

CVE-2004-0270 affects the ClamAV ecosystem, specifically libclamav 0.65. A remote attacker can trigger a denial-of-service by sending a malformed uuencoded e‑mail message with an invalid line length, causing an assert failure in clamd that terminates the calling process. The description in multip...

CVE-2004-0013

CVE-2004-0013 concerns jabber, an instant messaging server. The issue is a bug in the handling of SSL connections in jabber versions around 1.4.2/1.4.2a (and possibly earlier), which remote attackers can exploit to cause the server to crash, i.e., a denial-of-service condition. Publicly documente...

CVE-2004-0261

OpenJournal 2.0 (2.0–2.0.5) is affected by an authentication bypass in oj.cgi, where a uid parameter set to 0 allows remote attackers to access the control panel. The root cause and specific exploit details are not elaborated beyond this description in the provided documents. Impact is elevated (...

CVE-2004-0045

CVE-2004-0045 affects the InterNetNews INN 2.4.0 NNTP server component (control message handling). A boundary/overflow condition in the ARTpost function within art.c can allow a remote attacker to execute arbitrary code. Public advisories (e.g., Slackware SSA 2004-014-02) note a fixed package upd...

CVE-2004-0122

CVE-2004-0122 is described as affecting Microsoft MSN Messenger 6.0 and 6.1, allowing remote attackers to read arbitrary files via improper handling of certain requests. Connected advisories for pidgin/libpurple reference a related directory-traversal issue in the MSN protocol plugin (slp.c) that...

CVE-2004-0077

CVE-2004-0077 corresponds to a bounds-checking flaw in the Linux kernel mremap implementation (2.2 to 2.6.2). The issue arises when do_munmap return value is not properly checked after exceeding the maximum VMA descriptors, enabling a local attacker to gain root privileges. Connected advisories c...

CVE-2004-0173

CVE-2004-0173 describes a directory traversal vulnerability affecting Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier when run on Cygwin. An attacker can read arbitrary files by requesting a URL containing "..%5C" (dot dot encoded backslash) sequences, enabling partial confidentiality im...

CVE-2004-0347

CVE-2004-0347 : A cross-site scripting (XSS) vulnerability exists in the delhomepage.cgi script of NetScreen‑SA 5000 Series running firmware 3.3 Patch 1 (build 4797). The issue allows remote authenticated users to inject and execute arbitrary script as other users via the row parameter. Affected ...

CVE-2004-0263

PHP 4.3.4 and earlier in Apache 1.x and 2.x modphp can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information...

CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...