CVE-2004-0586

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the 1 DownLoadURL, 2 SaveFilePath, and 3 Download ActiveX methods...

CVE-2004-0716

Buffer overflow in the DCE daemon DCED for the DCE endpoint mapper epmap on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data...

CVE-2004-0418

servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...

CVE-2004-0210

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

CVE-2004-0771

Buffer overflow in the extractone function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w working directory command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise...

CVE-2004-0598

CVE-2004-0598 — libpng vulnerability : The png_handle_iCCP function in libpng 1.2.5 and earlier is vulnerable to a crafted PNG image that triggers a null dereference, causing an application crash (DoS). Affected: libpng up to and including 1.2.5. Mitigation: upgrade libpng to 1.2.5 or newer (as f...

CVE-2004-0494

Multiple extfs backend scripts for GNOME virtual file system VFS before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI...

CVE-2004-0771

CVE-2004-0771 describes a buffer overflow in the extract_one function of lhext.c in LHA triggered by a long w (working directory) command-line option, allowing remote code execution as stated in the description. The issue is linked to related LHA vulnerabilities (e.g., CVE-2004-0694, CVE-2004-076...

CVE-2004-0415

The CVE-2004-0415 issue affects the Linux kernel where 64-bit file offset pointers are not reliably converted to 32 bits, enabling a local unprivileged user to access portions of kernel memory. An attacker can leverage this through file I/O paths that manipulate 32/64-bit offset conversions, pote...

CVE-2004-0641

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2004-0597

CVE-2004-0597 describes multiple buffer overflows in libpng 1.2.5 and earlier caused by insufficient bounds checks in png_handle_tRNS, png_handle_sBIT, and png_handle_hIST. This allows remote attackers to execute arbitrary code via crafted PNG images. Connected sources note that some advisories p...

CVE-2004-0494

CVE-2004-0494 affects GNOME VFS extfs backend scripts in GNOME VFS prior to 1.0.1, allowing remote attackers to perform unauthorized actions via a gnome-vfs URI. Connected documents confirm affected packages include gnome-vfs, gnome-vfs2 and gnome-vfs2-doc, with vendor advisories: RHSA-2004:373 (...

thttp207.txt

Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICEChina.com ================ Content: in libhttpd.c: int httpdparserequest httpdconn hc ... if hc-decodedurl0 ...

Fedora Core 1 : libpng-1.2.5-7 (2004-237)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...

RHEL 2.1 / 3 : gnome-vfs (RHSA-2004:373)

Updated GNOME VFS packages that remove potential extfs-related vulnerabilities are now available. GNOME VFS is the GNOME virtual file system. It provides a modular architecture and ships with several modules that implement support for file systems, HTTP, FTP, and others. The extfs backends make i...

isec-0016-procleaks.txt

Synopsis: Linux kernel file offset pointer handling Product: Linux kernel Version: 2.4 up to to and including 2.4.26, 2.6 up to to and including 2.6.7 Vendor: http://www.kernel.org/ URL: http://isec.pl/vulnerabilities/isec-0016-procleaks.txt CVE: CAN-2004-0415 Author: Paul Starzetz Date: Aug 04,...

RHEL 2.1 / 3 : ethereal (RHSA-2004:378)

Updated Ethereal packages that fix various security vulnerabilities are now available. Ethereal is a program for monitoring network traffic. The SNMP dissector in Ethereal releases 0.8.15 through 0.10.4 contained a memory read flaw. On a system where Ethereal is running, a remote attacker could...

Fedora Core 2 : libpng-1.2.5-8 (2004-239)

The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. During a source code audit, Chris Evans discovered several buffer overflows in libpng. An attacker could create a carefully crafted PNG file in such a way that it wou...

CVE-2004-1365

Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user...

CVE-2004-0766

NGSEC StackDefender 2.0 contains a vulnerability in the BaseAddress handling for the kernel API hooks ZwAllocateVirtualMemory and ZwProtectVirtualMemory. The issue arises from dereferencing an invalid BaseAddress, which can lead to a system crash (denial of service). Exploitation details are not ...