CVE-2004-0735

Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...

CVE-2004-0719

The CVE-2004-0719 frame-injection vulnerability affects Internet Explorer on Windows (IE6 on XP) and IE for Mac 5.2.3, arising from insufficient protection against framing content across domains, enabling content injection and potential site spoofing. Exploitation details are not fully provided i...

CVE-2004-0740

The CVE-2004-0740 entry concerns the Lexmark HTTP server (notably in the T522 and possibly other models). The vulnerability arises from handling of an HTTP header with an excessively long Host field, which may trigger a buffer overflow and allow remote attackers to cause a denial of service (serv...

CVE-2004-0732

CVE-2004-0732 describes a SQL injection in Php-Nuke’s Search module (index.php) exploitable via the instory parameter. Root cause: insufficient input validation in the Search module, enabling remote attackers to inject arbitrary SQL. Impact per CVSSv2 is partial disclosure, modification, and disr...

CVE-2004-0720

CVE-2004-0720 affects Safari 1.2.2, where a frame in one domain can inject content into a frame belonging to another domain, enabling web-site spoofing. This is a cross-domain frame-injection vulnerability. The provided connected documents specify the issue but do not include exploit code or reme...

CVE-2004-0719

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection...

CVE-2004-0686

CVE-2004-0686 describes a buffer overflow in Samba when the mangling method = hash option is enabled in smb.conf, affecting Samba 2.2.x (up to 2.2.9) and 3.0.0 to 3.0.4. The Initial Description notes unknown impact and attack vectors, but connected OpenVAS records classify it with high severity (...

CVE-2004-0737

CVE-2004-0737 concerns Php-Nuke’s Search module (index.php). The advisory notes multiple cross-site scripting vulnerabilities exploitable through 11 parameters (sid, max, sel1–sel5, match, mod1–mod3), allowing remote injection of arbitrary script/HTML. The root cause implied is insufficient input...

CVE-2004-0742

The CVE-2004-0742 entry affects Sun Java System Portal Server 6.2 (formerly Sun ONE). The vulnerability allows remote authenticated users to gain Calendar Server privileges and modify Calendar data by changing display options to a non-default view. The primary affected component is the Calendar/D...

CVE-2004-0600

CVE-2004-0600 affects Samba SWAT (the Web Administration Tool) used with Samba 3.0.2–3.0.4. The vulnerability arises from a flaw in HTTP basic authentication base64 decoding, leading to a heap-based buffer overflow that can allow remote code execution or a denial of service. Public references (Sa...

CVE-2004-0741

LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service crash or hang via a long URL, possibly triggering a buffer overflow...

CVE-2004-0600

Buffer overflow in the Samba Web Administration Tool SWAT in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication...

CVE-2004-0720

Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability...

CVE-2004-0742

Sun Java System Portal Server 6.2 formerly Sun ONE allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view...

CVE-2004-0741

CVE-2004-0741 affects LionMax Software WWW File Share Pro 2.60. The vulnerability allows remote attackers to cause a denial of service (crash or hang) by sending a long URL, potentially triggering a buffer overflow. The provided documents do not include exploitation details, affected versions bey...

CVE-2004-0728

The CVE-2004-0728 entry describes a DoS in Microsoft SMS: the Remote Control Client Service (SMS 2.50.2726.0) can crash when receiving a specially crafted TCP packet to port 2702, causing invalid memory read/write. Documents confirm the component involved (Remote Control Service) and the vulnerab...

CVE-2004-0729

CVE-2004-0729 affects PhpBB 2.0.8. The vulnerability occurs when users supply invalid input via (1) category_rows to index.php, (2) faq to faq.php, or (3) ranksrow to profile.php, triggering error messages that reveal the full server path. The available documents confirm the component and origin ...

CVE-2004-0739

CVE-2004-0739 describes a buffer overflow in Whisper FTP Surfer 1.0.7 that allows a remote FTP server to cause a denial of service (client crash) and potentially execute arbitrary code via a long filename. The NVD entry lists this as a network‑vector, low complexity, no authentication required, w...

CVE-2004-0718

The CVE-2004-0718 entry covers a frame-injection vulnerability affecting multiple browsers (Mozilla 1.6, Firebird 0.7, Firefox 0.8, Netscape 7.1) where a frame from one domain injects content into a frame in another domain, facilitating web-site spoofing and related attacks. The Connected documen...

CVE-2004-0717

CVE-2004-0717 affects Opera 7.51 for Windows and 7.50 for Linux. The vulnerability arises from Opera not properly preventing a frame in one domain from injecting content into a frame in another domain, enabling frame-injection that can facilitate site spoofing and related attacks. The connected d...