CVE-2004-0631

Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command...

CVE-2004-0779

The vulnerability affects Mozilla 1.6, Firebird 0.7, and Firefox 0.8, where cached passwords for SSL sites are not properly restricted to SSL sessions. This allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site. Root cause: insufficient verification of SSL-...

CVE-2004-0630

CVE-2004-0630 affects Adobe Acrobat Reader on Unix/Linux (orig. 5.0.5/5.0.6, possibly earlier than 5.0.9). The vulnerability lies in the uudecode filename handling, where a filename containing shell metacharacters (backtick `) can allow remote code execution via the uudecode command. Multiple ven...

CVE-2004-0630

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters "" or backtick in the filename of the PDF file that is provided to the uudecode...

[ GLSA 200408-11 ] Nessus: "adduser" race condition vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200408-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

CVE-2004-0203

CVE-2004-0203 affects Outlook Web Access (OWA) for Exchange Server 5.5 SP4. The vulnerability is a cross-site scripting flaw in the HTML redirect query validation, allowing an attacker to persuade a user to click a crafted URL and execute arbitrary script in the victim’s browser, potentially spoo...

CVE-2004-0744

The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service memory and resource consumption via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet...

CVE-2004-0636

CVE-2004-0636 describes a buffer overflow in AOL Instant Messenger (AIM) 5.5’s goaway URI handler. The goaway function overflows when processing a long Away message, enabling a remote attacker to execute arbitrary code or cause a crash. Affected versions include AIM 5.5 and 5.5.3595. Connected so...

CVE-2004-0744

CVE-2004-0744 is referenced in HP-UX advisories as a remote Denial of Service vulnerability in TCP/IP (Rose/fragment attack). The HP-UX impact concerns B.11.00, B.11.04, B.11.11, and B.11.23 running TCP/IP, with patchesPHNE_30161, PHNE_33427, PHKL_31500 (and related updates) required to mitigate....

CVE-2004-0743

Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak...

CVE-2004-0743

CVE-2004-0743 affects Apple Safari on Mac OS X prior to 10.3.5. After submitting a form via POST, if the server redirects to a GET URL and the user navigates with forward/back, Safari may re-send the POST data to the GET URL, potentially leaking information. The issue is documented for Mac OS X

CVE-2004-0636

Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger AIM 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message...

SUSE-SA:2004:025: gaim

The remote host is missing the patch for the advisory SUSE-SA:2004:025 gaim. Gaim is an instant messaging client which supports a wide range of protocols. Sebastian Krahmer of the SuSE Security Team discovered various remotely exploitable buffer overflows in the MSN-protocol parsing functions...

CVE-2004-1715

Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\", "..", and similar dot dot sequences in the URL...

Moodle 'post.php' 'reply' Parameter XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross-site scripting attack due to the application not properly validating the 'reply' variable on submission to the 'post.php' script. This allows a user to create a specially crafted URL that would execute arbitrary...

BlackJumboDog FTP Server Multiple Command Overflow

The remote host is running BlackJumboDog FTP server. This FTP server fails to properly check the length of parameters in multiple FTP commands, most significant of which is USER, resulting in a stack overflow. With a specially crafted request, an attacker can execute arbitrary code resulting in a...

phpMyFAQ index.php action Parameter Local File Inclusion

The version of phpMyFAQ on the remote host contains a flaw that may lead to an unauthorized information disclosure. The problem is that user input passed to the 'action' parameter is not properly verified before being used to include files, which could allow a remote attacker to view any accessib...

CVE-2004-1713

Unknown vulnerability in HP Process Resource Manager PRM C.02.01.01 and earlier, as used by HP-UX Workload Manager WLM, allows local users to corrupt data files...

Mac OS X Multiple Vulnerabilities (Security Update 2004-08-09)

The remote host is missing Security Update 2004-08-09. libpng is a library used for manipulating graphics files. Several buffer overflows have been discovered in libpng. A remote attacker could exploit these vulnerabilities by tricking a user into opening a maliciously crafted PNG file, resulting...

CVE-2004-1701

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication...