CVE-2004-0762

CVE-2004-0762 affects Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. An attacker could lure a remote web site to trigger interaction events to manipulate the XPInstall Security dialog, allowing installation of arbitrary extensions. The vulnerability is documented with a high ...

CVE-2004-0763

CVE-2004-0763 affects Mozilla Firefox (0.9.1/0.9.2). The OpenVAS and related advisories describe a certificate-spoofing flaw where an attacker can cause a trusted site’s certificate to be presented for content from a malicious site via redirects and onunload JavaScript, enabling UI cues (padlock)...

CVE-2004-0765

The certTestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name FQDN, which allows remote attackers to spoof trusted certificates...

CVE-2004-0722

CVE-2004-0722 relates to an Integer overflow in the SOAPParameter constructor used by Netscape 7.0/7.1 and Mozilla 1.6 (and possibly earlier). The underlying issue can allow remote code execution through a crafted SOAP page or message, as described by multiple advisories. Public details in connec...

CVE-2004-0762

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box...

CVE-2004-0760

CVE-2004-0760 describes a MIME-type confusion in Mozilla/Mozilla-based Firefox components triggered by a null character (%00) in an FTP URI, allowing a remote attacker to cause Mozilla to open a URI as a different MIME type. The OpenVAS/SUSE advisories confirm Mozilla-related updates are availabl...

CVE-2004-0761

CVE-2004-0761 affects Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. The vulnerability allows remote attackers to use certain redirect sequences to spoof the security lock icon, making a web page appear encrypted. This is documented with a CVSS base score of 5.0 (Network atta...

CVE-2004-0759

CVE-2004-0759 affects Mozilla prior to version 1.7. The flaw lets a remote server read arbitrary files by JavaScript setting the value of an input type="file" element. Multiple OpenVAS entries and vendor advisories corroborate Mozilla involvement, but no specific exploit details or patch versions...

CVE-2004-0557

CVE-2004-0557 covers two buffer overflows in SoX (St_WavStartRead in wav.c) affecting 12.17.2–12.17.4. A remote attacker could execute arbitrary code by feeding a specially crafted WAV header. Public docs identify the vulnerable function and the header-field handling as the root cause; affected v...

CVE-2004-1708

Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service crash via a large number of connections...

CVE-2004-0557

Multiple buffer overflows in the stwavstartread function in wav.c for Sound eXchange SoX 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields...

WebCam Watchdog sresult.exe XSS

The remote host is running WebCamSoft's watchdog software. There is a CGI script included in this software suite 'sresult.exe' that fails to sanitize user-supplied input to the 'cam' parameter before using it to generate dynamic output. An attacker may exploit this issue to steal cookie-based...

phpMyFAQ Image Upload Authentication Bypass

The version of phpMyFAQ on the remote host contains a flaw that could allow an attacker without authorization to upload and delete arbitrary images on the remote host. An attacker may exploit this problem to deface the remote website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

Mandrake Linux Security Advisory : metamail (MDKSA-2004:014)

Two format string and two buffer overflow vulnerabilities were discovered in metamail by Ulf Harnhammar. The updated packages are patched to fix these holes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Mandrake...

Mandrake Linux Security Advisory : xchat (MDKSA-2004:036)

A remotely exploitable vulnerability was discovered in the Socks-5 proxy code in XChat. By default, socks5 traversal is disabled, and one would also need to connect to an attacker's own custom proxy server in order for this to be exploited. Successful exploitation could lead to arbitrary code...

Mandrake Linux Security Advisory : kolab-server (MDKSA-2004:052)

Luca Villani reported the disclosure of critical configuration information within Kolab, the KDE Groupware server. The affected versions store OpenLDAP passwords in plain text. The heart of Kolab is an engine written in Perl that rewrites configuration for certain applications based on templates...

Mandrake Linux Security Advisory : samba (MDKSA-2004:035)

A vulnerability was discovered in samba where a local user could use the smbmnt utility, which is shipped suid root, to mount a file share from a remote server which would contain a setuid program under the control of the user. By executing this setuid program, the local user could elevate their...

Mandrake Linux Security Advisory : cvs (MDKSA-2004:048)

Stefan Esser discovered that malformed 'Entry' lines in combination with Is-modified and Unchanged can be used to overflow malloced memory in a way that can be remotely exploited. The updated packages contain a patch to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandrake Linux Security Advisory : mtools (MDKSA-2004:016)

Sebastian Krahmer found that the mformat program, when installed suid root, can create any file with 0666 permissions as root, and that it also does not drop privileges when reading local configuration files. The updated packages remove the suid bit from mformat. %NASLMINLEVEL 70300 C Tenable...