CVE-2004-0656

The acceptclient function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections...

CVE-2004-0677

Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service temporary hang via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive "A"...

CVE-2004-0655

eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...

CVE-2004-0662

PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to 1 resize.php or 2 modules.php, which reveals the path in an error message...

CVE-2004-0656

The acceptclient function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections...

CVE-2004-0659

Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name...

CVE-2004-0675

CVE-2004-0675 is a cross-site scripting (XSS) vulnerability in Cart32 shopping cart components cart32.exe and c32web.exe. The flaw allows an attacker to inject arbitrary script via the cart32 parameter to the GetLatestBuilds command, with CVSS v2 base score 6.8 (network, medium complexity, no pri...

CVE-2004-0679

The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...

CVE-2004-0668

Summary: CVE-2004-0668 affects IBM Lotus Domino Web Access, where opening a large email message via Web Access can trigger an out-of-memory condition in the Domino server, leading to a denial of service. The connected advisory CPAI-2004-155 describes the vulnerability as occurring when processing...

CVE-2004-0652

BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods...

CVE-2004-0659

CVE-2004-0659 describes a buffer overflow in TranslateFilename() of MPlayer 1.0pre4 (common.c), allowing remote code execution via a crafted long filename. The connected advisories confirm the issue affects MPlayer and recommend upgrading to the latest available version; Gentoo GLSA 200408-01 sug...

CVE-2004-0678

CVE-2004-0678 affects the 12Planet Chat Server 2.9, specifically the component one2planet.infolet.InfoServlet . The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to execute arbitrary script as other users by manipulating the page parameter. The NVD entry lists a ...

CVE-2004-0683

CVE-2004-0683 affects Symantec Norton AntiVirus 2002 and 2003. The issue allows a remote attacker to trigger a denial of service by sending a compressed archive containing a large number of directories, causing CPU consumption. The available records do not specify affected build numbers, versions...

CVE-2004-0654

Technical details about CVE-2004-0654 are not publicly available in the supplied documents; no concrete affected product/version, root cause, or remediation are provided. Monitor for updates from official sources.

CVE-2004-0665

CVE-2004-0665 affects csFAQ.cgi in csFAQ. An invalid database parameter can cause an error message that reveals the web server’s path, enabling information disclosure. The NVD entry lists a remote, unauthenticated exposure with network access, low attack complexity, and partial confidentiality im...

CVE-2004-0645

Buffer overflow in the wvHandleDateTimePicture function in wv library wvWare 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field...

CVE-2004-0672

The CVE-2004-0672 entry applies to Netegrity IdentityMinder Web Edition 5.6, where multiple cross-site scripting (XSS) vulnerabilities affect the primary and management web interfaces. The issue allows remote attackers to execute scripts as other users via two vectors: (1) a script starting with ...

CVE-2004-0663

Cross-site scripting XSS vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the 1 id parameter to the a privatemessages module; 2 search parameter to the b links and c content modules; and 3 files parameter to the gallery module...

CVE-2004-0684

The CVE-2004-0684 entry concerns WebSphere Edge Server 5.02’s Edge Component Caching Proxy when JunctionRewrite is enabled. A remote attacker can trigger a denial-of-service by sending an HTTP GET request without parameters. The description indicates potential impact to availability but does not ...

CVE-2004-0650

Cisco Collaboration Server (CCS) Vulnerability CVE-2004-0650: The UploadServlet in CCS running ServletExec prior to 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. The issue enables remote code execution with network access, reflectin...