CVE-2004-0099

CVE-2004-0099 concerns FreeBSD 5.1–5.2 where the mksnap_ffs(8) utility calls the snapshot interface with only the snapshot flag, resetting all other file-system flags to defaults. This can cause security-related settings to be disabled and may allow a local user to bypass intended access controls...

CVE-2004-0190

Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges...

CVE-2004-0274

Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STATOFFERED status to a bot that is not a sharebot, which allows remote attackers to use STATOFFERED to promote a bot to a sharebot and conduct unauthorized activities...

CVE-2004-0188

Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password...

CVE-2004-0186

smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted...

CVE-2004-0096

CVE-2004-0096 targets mod_python and is associated with a denial-of-service affecting Apache via a crafted query string. OpenVAS entries include CVE linkage (CVE-2004-0096) and note a 5.0 base score (AV:N/AC:L/Au:N/C:N/I:N/A:P); related CAN-2003-0973 is cited. The vulnerability is discussed in mu...

AIX 5.1 : IY55681

The remote host is missing AIX Critical Security Patch number IY55681 SECURITY: Possible buffer overflow in putlvcb command. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CVE-2004-1774

Buffer overflow in the SDOCODESIZE procedure of the MD2 package MDSYS.MD2.SDOCODESIZE in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter...

CVE-2004-1652

phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges...

CVE-2004-1648

Cross-site scripting XSS vulnerability in 1 index.asp, 2 ChangePassword.asp, 3 userslist.asp, 4 and usersadd.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter...

FreeBSD : ImageMagick -- BMP decoder buffer overflow (b6cad7f3-fb59-11d8-9837-000c41e2cdad)

Marcus Meissner discovered that ImageMagick's BMP decoder would crash when loading the test BMP file created by Chris Evans for testing the previous Qt vulnerability. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

Titan FTP Server Multiple Command Remote Overflow

The remote is running Titan FTP Server. All versions up to and including 3.21 are reported vulnerable to a remote heap overflow in the CWD, STAT or LIST command processing. An attacker may deny service to legitimate users or execute arbitrary code on the remote host. C Tenable Network Security...

Fedora Core 2 : krb5-1.3.4-6 (2004-277)

Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. Several double-free bugs were found in the Kerberos 5 KDC and libraries. A remote attacker could potentially exploit these flaws to execute arbitrary code. The...

Site News v 1.1 admin head error

+| Advisory 16. Site News v 1.1 admin head error Software: Site News v 1.1 Problem-Type: local Platforms: All Vulnerability: admin error Date: 29'Aug 2004 discovered by XSPYD3X -xspyd3xatinboxdotru- HTTP: www.lwb57.org IRC: irc.lwb57.org:6667 lwb +:| Exploit |: Messages are added by the usual use...

CVE-2004-1647

SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via 1 admin or Pass parameter to indexnext.asp, 2 LoginId, OPass, or NPass to CPassChangePassword.asp, 3 usersedit.asp, or 4 usersadd.asp...

CVE-2004-1660

PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to 1 showarchives.php or 2 shownews.php...

GLSA-200402-06 : Updated kernel packages fix the AMD64 ptrace vulnerability

The remote host is affected by the vulnerability described in GLSA-200402-06 Updated kernel packages fix the AMD64 ptrace vulnerability A vulnerability has been discovered by Andi Kleen in the ptrace emulation code for AMD64 platforms when eflags are processed, allowing a local user to obtain...

CVE-2004-1643

WSFTP 5.0.2 allows remote authenticated users to cause a denial of service CPU consumption via a CD command that contains an invalid path with a "../" sequence...

CVE-2004-1640

Multiple cross-site scripting XSS vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the 1 terme parameter to search.php or 2 letter parameter to letter.php...

CVE-2004-0820

Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file...