CVE-2004-0664

PowerPortal 1.x is affected by a directory traversal/path disclosure vulnerability in modules.php via the files parameter, allowing remote attackers to discover installed path information. OpenVAS details describe a remote vulnerability that enables disclosure of the installation path, aiding rec...

CVE-2004-0650

UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...

CVE-2004-0682

comersusgatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL...

CVE-2004-0669

CVE-2004-0669 affects Lotus Domino 6.5.0 and 6.5.1 when IMAP is enabled. The issue allows remote authenticated users to modify their own quota by issuing the IMAP setquota command. The connected sources confirm the affected product/version and the underlying impact is quota manipulation, with no ...

CVE-2004-0655

CVE-2004-0655 affects esearch = 0.6.2. If upgrading is not immediately possible, there is no workaround noted in the public documents. Exploitation details or live in-the-wild status are not provided beyond the advisory content in the connected documents.

CVE-2004-0656

CVE-2004-0656 affects PureFTPd 1.0.18 and earlier. The vulnerability is in the accept_client function that handles new connections, allowing remote attackers to cause a Denial of Service by exceeding the maximum number of connections. The impact is described as DoS; exploitation details are not p...

CVE-2004-0677

CVE-2004-0677 affects Fastream NETFile FTP Server 6.7.2.1085 and earlier. The issue allows remote attackers to cause a denial-of-service (temporary hang) by issuing a cd command with an unusual argument, potentially involving multiple leading slashes or an access to the floppy drive ("A"). The de...

CVE-2004-0670

CVE-2004-0670 affects Prestige 650HW-31 devices running Rompager 4.7. The issue allows remote attackers to trigger a denial of service (device reboot) by submitting a long password. The documents do not provide exploitation details, affected software versions beyond Rompager 4.7 on the Prestige 6...

CVE-2004-0676

The vulnerability CVE-2004-0676 affects Fastream NETFile FTP/Web Server up to version 6.7.2.1085. A directory traversal flaw in the filename parameter (using .. and // sequences) allows remote attackers to create or delete arbitrary files. Affected component: Fastream NETFile FTP/Web Server, vers...

CVE-2004-0660

CuteNews 1.3.1 is affected by a cross-site scripting (XSS) vulnerability in show_archives.php and show_news.php (and possibly other PHP files), allowing remote attackers to inject arbitrary script via the id parameter. This aligns with OpenVAS entries labeling it as a CuteNews XSS vulnerability a...

CVE-2004-0648

The CVE-2004-0648 issue affects Mozilla Suite <=1.7.0+1, Firefox <=0.9.1+1, and Thunderbird

CVE-2004-0657

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

CVE-2004-0667

Rule Set Based Access Control RSBAC 1.2.2 through 1.2.3 allows access to syscreat, sysopen, and sysmknod inside jails, which could allow local users to gain elevated privileges...

CVE-2004-0657

Removed by vendor...

CVE-2004-0684

WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters...

CVE-2004-0654

Unknown vulnerability in the Basic Security Module BSM, when configured to audit either the Administrative ad or the System-Wide Administration as audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service kernel panic...

CVE-2004-0667

RSBAC 1.2.2–1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, enabling local users to gain elevated privileges. The affected component is the system-call access control in RS BAC; root cause is unsafe exposure of these syscalls within jailed environments. Documented impact i...

CVE-2004-0652

CVE-2004-0652 affects BEA WebLogic Server and WebLogic Express (versions 7.0 with SP4, and 8.1 with SP2). The vulnerability arises from accessible internal methods that allow an attacker to obtain the boot credentials (username and password) needed to start the server. Impact is credential leakag...

CVE-2004-0666

The CVE-2004-0666 issue is in popclient 3.0b6, specifically the POP3_readmsg function. An off-by-one error can trigger a buffer overflow when processing a mail message with a certain line length, allowing remote attackers to cause a denial of service (application crash). The provided documents id...