CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0689

KDE before 3.3.0 is affected by CVE-2004-0689 where certain symbolic links point to stale locations, enabling local users to create or truncate arbitrary files through kde/kdelibs components. Public references in 2004 advisories (RHSA-2004:412, DSA-539-1, Gentoo GLSA 200408-13, FreeBSD/OpenVAS en...

CVE-2004-0408

Buffer overflow in the childservice function in the ident2 ident daemon allows remote attackers to execute arbitrary code...

CVE-2004-0777

CVE-2004-0777 is a format-string vulnerability in Courier-IMAP’s auth_debug function that can be triggered when DEBUG_LOGIN is enabled. Affected versions include Courier-IMAP 1.6.0–2.2.1 and 3.x–3.0.3. The issue allows remote code execution by supplying crafted input (username/password) containin...

CVE-2004-0408

CVE-2004-0408 describes a buffer overflow in the ident2 daemon’s child_service function, enabling remote code execution. The vulnerability arises because a buffer is slightly too small to hold incoming data, allowing an attacker to overflow and potentially execute arbitrary code with the ident2 p...

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service server crash via a missing argument, which triggers a null pointer dereference...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

CVE-2004-0769

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771...

CVE-2004-0231

Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...

CVE-2004-0232

Multiple format string vulnerabilities in Midnight Commander mc before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2004-0425

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie...

CVE-2004-0506

The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service crash via unknown attack vectors that cause a null pointer dereference...

CVE-2004-0518

Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors...

CVE-2004-0762

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box...

CVE-2004-0767

NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...

CVE-2004-0779

The 1 Mozilla 1.6, 2 Firebird 0.7 and 3 Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site...

CVE-2004-0490

cPanel, when compiling Apache 1.3.29 and PHP with the modphpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPTFILENAME variable to find and execute a script instead of the PATHTRANSLATED variable, which allows local users to execute arbitrary PHP code...

CVE-2004-0502

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shel...

CVE-2004-0230

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service connection loss to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP...