Fedora Core 2 : neon-0.24.5-2.2 (2004-130)

Stefan Esser discovered a flaw in the neon library which allows a heap buffer overflow in a date parsing routine. An attacker could create a malicious WebDAV server in such a way as to allow arbitrary code execution on the client should a user connect to it using a neon-based application which us...

Fedora Core 2 : mailman-2.1.5-7 (2004-168)

Fixes security issue CVE-2004-0412 noted in bug https://bugzilla.redhat.com/bugzilla/showbug.cgi?id=123559 Mailman subscriber passwords could be retrieved by a remote attacker. Security hole is fixed in mailman-2.1.5 Important Installation Note: Some users have reported problems with bad queue...

Fedora Core 1 : pwlib-1.5.0-4 (2004-078)

A test suite for the H.225 protocol part of the H.323 family provided by the NISCC uncovered bugs in PWLib prior to version 1.6.0. An attacker could trigger these bugs by sending carefully crafted messages to an application. The effects of such an attack can vary depending on the application, but...

CVE-2004-1749

Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service CPU consumption via a large number of HTTP requests...

CVE-2004-0706

Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files...

CVE-2004-0714

Cisco IOS SNMP processing in releases 12.0S, 12.1E, 12.2, 12.2S, 12.3, 12.3B, and 12.3T contains a vulnerability in handling SNMP requests that, when exploited remotely, could cause the device to reload and potentially memory corruption. The issue is triggered by solicited SNMP operations on UDP ...

CVE-2004-0713

The CVE-2004-0713 case affects BEA WebLogic Server and WebLogic Express, versions 8.1–SP2, 7.0–SP4, and 6.1–SP6. The vulnerability is in the remove method of a stateful Enterprise JavaBean (EJB), where EJB permissions are not properly checked before unexporting a bean. This allows remote authenti...

CVE-2004-0715

The CVE-2004-0715 affects BEA WebLogic Server/WebLogic Express, specifically the WebLogic Authentication provider for versions 8.1 through SP2 and 7.0 through SP4. The root cause is improper clearing of group member relationships when a group is deleted, which can allow a new group bearing the sa...

CVE-2004-0708

CVE-2004-0708 affects MoinMoin 1.2.1 and earlier. The vulnerability allows privilege escalation by a remote attacker who creates a user with the same name as an existing group that has higher privileges. Documented impact is privilege escalation (not full remote code execution) with a CVSSv2 base...

CVE-2004-0704

CVE-2004-0704 affects Bugzilla 2.16.x (before 2.16.6) and 2.18 (before 2.18rc1). The flaw resides in the CGI scripts duplicates.cgi and buglist.cgi , where, when Bugzilla is configured to hide products, remote attackers can view hidden products. This is an information disclosure vulnerability in ...

CVE-2004-0712

The configuration tools 1 config.sh in Unix or 2 config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges...

CVE-2004-0705

Multiple cross-site scripting XSS vulnerabilities in 1 editcomponents.cgi, 2 editgroups.cgi, 3 editmilestones.cgi, 4 editproducts.cgi, 5 editusers.cgi, and 6 editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other...

CVE-2004-0566

Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value...

CVE-2004-0702

DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information...

CVE-2004-0710

IP Security VPN Services Module VPNSM in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.217bSXA, before 12.217dSXB, or before 12.214SY03 could allow remote attackers to cause a denial of service device crash and reload via a malformed Internet K...

CVE-2004-0713

The remove method in a stateful Enterprise JavaBean EJB in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from...

CVE-2004-0709

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

CVE-2004-0709

CVE-2004-0709 affects HP OpenView Select Access 5.0–6.0 and refers to a URL handling flaw where UTF-8 encoded Unicode characters are not decoded correctly, potentially letting an attacker bypass access controls. The provided metrics indicate CVSSv2 base score 7.5 (HIGH) with network access, low a...

CVE-2004-0707

CVE-2004-0707 describes an SQL injection in Bugzilla’s editusers.cgi. The issue affects Bugzilla 2.16.x before 2.16.6 and 2.18 before 2.18rc1, allowing remote attackers with privileges to grant membership to any group to execute arbitrary SQL. The connected information confirms the vulnerable com...

CVE-2004-0702

Bugzilla 2.17.1–2.17.7 is affected by CVE-2004-0702: the DBI layer displays the database password in an error message when the SQL server is not running, enabling potential information disclosure to remote attackers. The issue concerns the Bugzilla CGI/database interaction rather than input valid...