8091 matches found
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service system crash via an invalid address for the ObjectAttribues parameter to the hooks for the 1 ZwCreateFile or 2 ZwOpenFile functions...
CVE-2004-0769
Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771...
CVE-2004-0767
The CVE-2004-0767 entry concerns NGSEC StackDefender 1.10. The vulnerability arises when an invalid address is supplied for the ObjectAttributes parameter to the hooks for ZwCreateFile and ZwOpenFile, potentially allowing a denial of service via a system crash. The available documentation provide...
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded...
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed...
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point "!" for the 1 DBSNMP or 2 SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SY...
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service listener crash via a malformed serviceregisterNSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory...
CVE-2004-1709
Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users...
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service system crash via an invalid address for the BaseAddress parameter to the hooks for the 1 ZwAllocateVirtualMemory or 2 ZwProtectVirtualMemory functions...
CVE-2004-1364
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLEHOME\bin directory...
CVE-2004-0769
CVE-2004-0769 : Buffer overflow in LHarc/LHA handling of long pathnames in LHarc format (2 headers for .LHZ) allows remote code execution. The issue is fixed in the header.c code path (different from CVE-2004-0771). Affected in LHarc/LHA upstream releases; multiple advisories reference this vulne...
CVE-2004-1368
ISQLPlus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script...
[Full-Disclosure] Bug@thttpd
Application: thttpd Vendors: http://www.acme.com/software/thttpd/ Version: 2.07 beta 0.4 10dec99 Platforms: Windows Bug: Directory Traversal Date: 2004-08-04 Author: CoolICE e-mail: CoolICEChina.com ================ Content: in libhttpd.c: int httpdparserequest httpdconn hc ... if hc-decodedurl0 ...
CVE-2004-0758
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid...
CVE-2004-0765
The CVE-2004-0765 entry affects Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, where cert_TestHostName only validates the hostname portion of a certificate when the URI hostname is not an FQDN. This allows remote attackers to spoof trusted certificates. Root cause: certificat...
CVE-2004-0757
CVE-2004-0757 describes a heap-based buffer overflow in the POP3 SendUidl capability of Mozilla < 1.7, Firefox < 0.9, and Thunderbird
CVE-2004-0761
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted...
CVE-2004-0764
CVE-2004-0764 affects Mozilla-based browsers (Mozilla before 1.7; Firefox before 0.9; Thunderbird before 0.7) where the chrome flag and XML User Interface Language (XUL) files allow remote websites to hijack the browser UI. The vulnerability arises from XUL/UI manipulation that lets a site contro...