CVE-2004-0448

Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages...

CVE-2004-0468

CVE-2004-0468 describes a memory leak in Juniper’s JUNOS Packet Forwarding Engine (PFE) that can be exploited remotely by IPv6 packets to cause memory exhaustion and router reboot (DoS). OpenVAS notes a DoS vulnerability in Juniper Junos OS DoS vulnerability (CVE-2004-0468) tied to memory leakage...

CVE-2004-0468

Memory leak in Juniper JUNOS Packet Forwarding Engine PFE allows remote attackers to cause a denial of service memory exhaustion and device reboot via certain IPv6 packets...

CVE-2004-0602

The CVE-2004-0602 issue affects FreeBSD 4.x/5.x Linux binary compatibility mode. A programming error in handling certain Linux system calls can allow a local attacker to read/overwrite kernel memory, potentially gaining privileges or causing a system panic. Remediation in the connected docs inclu...

CVE-2004-0635

CVE-2004-0635 affects Ethereal 0.8.15–0.10.4, where the SNMP dissector is vulnerable. A remote attacker can trigger a denial of service (process crash) via a malformed or missing community string, causing an out-of-bounds read. The description explicitly ties the issue to the SNMP dissector, the ...

CVE-2004-0565

Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit...

CVE-2004-0395

CVE-2004-0395 affects the gatos package’s xatitv utility. The issue occurs when the configuration file is missing: xatitv does not drop root privileges, allowing a local user to trigger system calls containing shell metacharacters and potentially escalate to root. Debian DSA-509-1 documents this ...

CVE-2004-0477

CVE-2004-0477 affects the 3Com OfficeConnect Remote 812 ADSL Router. The vulnerability allows remote authentication bypass through repeated login attempts with any username/password. Public details describe this as an ADSL router bypass; root cause and remediation are not provided in the initial ...

CVE-2004-0395

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call...

CVE-2004-0634

The CVE-2004-0634 issue affects Ethereal (the SMB dissector) with the SMB SID snooping capability, in versions 0.9.15 through 0.10.4. The root cause is a null dereference triggered by a handle without a policy name in SMB processing, allowing a remote attacker to cause a denial of service (proces...

CVE-2004-0635

The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...

CVE-2004-0448

The CVE-2004-0448 entry describes a format-string vulnerability in the log function of jftpgw 0.13.4 and earlier. The flaw allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages. Documents confirm affected software (jftpgw, an FTP proxy...

CVE-2004-0477

Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447. This...

CVE-2004-0628

Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long scramble string...

CVE-2004-0633

The CVE-2004-0633 issue affects Ethereal’s iSNS dissector (versions 0.10.3–0.10.4). A remote, unauthenticated attacker could cause a crash or potentially execute code by sending malformed iSNS packets, per included reports. Impact is a denial of service (partial availability) and possible code ex...

CVE-2004-0628

CVE-2004-0628 is a stack-based buffer overflow in MySQL 4.1.x before 4.1.3 and in MySQL 5.0, exploitable by sending a long scramble string to the authentication workflow. This can allow a remote attacker to cause a denial of service (crash) and, potentially, execute arbitrary code. Root cause: im...

CVE-2004-0627

CVE-2004-0627 affects MySQL 4.1.x (before 4.1.3) and 5.0. A vulnerability in the check_scramble_323 function allows a remote attacker to bypass authentication by sending a zero-length scrambled string, enabling login to a valid account. The issue is exploitable over the network and is documented ...

CVE-2004-0424

Integer overflow in the ipsetsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service crash or execute arbitrary code via the MCASTMSFILTER socket option...

CVE-2004-0459

The Clear Channel Assessment CCA algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy aka "jabber", which prevents devices from transmitting data...

Immunity Canvas: SVNDATE

Name| svndate ---|--- CVE| CVE-2004-0397 Exploit Pack| CANVAS Description| Subversion = 1.0.2 utf-8 Apache2/WebDAV stack vs. heap exploit Notes| CVE Name: CVE-2004-0397 VENDOR: Collabnet OSVDB: http://osvdb.org/displayvuln.php?osvdbid=6301 Repeatability: Multiple tries References:...