8091 matches found
CVE-2004-0798
CVE-2004-0798 affects Ipswitch WhatsUp Gold web server (versions 8.03 and earlier). A buffer overflow in the internal _maincfgret.cgi when processing a long instancename parameter allows remote attackers to execute arbitrary code, as documented by multiple sources. Public exploit references exist...
AIX 5.2 : IY55682
The remote host is missing AIX Critical Security Patch number IY55682 SECURITY: Possible buffer overflow in putlvcb command. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
CVE-2004-1751
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service client or server crash via a large packet, which generates a "Message too long" socket error that is treated as a critical error...
Fedora Core 1 : gaim-0.82-0.FC1 (2004-278)
0.82 update contains many bug and security improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
CVE-2004-0692
CVE-2004-0692 is a denial-of-service vulnerability in the XPM image parser of the Qt3 library prior to 3.3.3. The issue arises from a malformed image file that triggers a null dereference, causing the application to crash. Affected products/contexts include Qt3 deployments (Qt3 library) used by L...
CVE-2004-0693
The GIF parser in the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692...
CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library qt3 before 3.3.3 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code...
CVE-2004-1662
YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message...
CVE-2004-0800
Format string vulnerability in CDE Mailer dtmail on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv0 value...
CVE-2004-0693
CVE-2004-0693 concerns the GIF parser in the QT library (qt3) prior to 3.3.3. A malformed GIF image can trigger a null dereference, allowing a remote attacker to cause an application crash (DoS). Affected component: qt3 GIF parser; root cause: null dereference when parsing crafted GIFs; impact: d...
CVE-2004-0800
CVE-2004-0800 affects the Solaris CDE Mailer component dtmail (on Solaris 8/9). The vulnerability is a format string issue in argv[0], allowing a local user to execute arbitrary code with the privileges of the vulnerable process (typically the mail group). The CERT/NVD entries describe local code...
PHP Code Snippet Library index.php Multiple Parameter XSS
The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...
CVE-2004-0796
SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages...
CVE-2004-1743
Easy File Sharing EFS Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the diskc virtual folder...
CVE-2004-1744
Easy File Sharing EFS Webserver 1.25 allows remote attackers to cause a denial of service CPU consumption or crash via many large HTTP requests...
CVE-2004-1752
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header...
CVE-2004-1742
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. dot dot in the viewcat parameter...
CVE-2004-0796
CVE-2004-0796 affects SpamAssassin 2.5x and 2.6x before 2.64, where a remote attacker can cause a denial of service by sending malformed messages. The public records indicate a DoS in parsing certain messages, with CVSS base score 5.0 (Network, Low complexity, no authentication) and impact on ava...