CVE-2004-0615

CVE-2004-0615 describes a cross-site scripting (XSS) vulnerability in D-Link DI-614+ (firmware 2.30), DI-704 (firmware 2.60B2), and DI-624 routers, exploitable by injecting arbitrary script/HTML via the DHCP HOSTNAME option in a DHCP request. Connected PT-2004-1707 details confirm the affected mo...

CVE-2004-0604

The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service crash, possibly via an empty search query, which triggers a NULL dereference...

CVE-2004-0393

CVE-2004-0393 corresponds to a format-string vulnerability in rlpr/rlprd (rlpr daemon) version 2.0.4. The flaw resides in the msg() function, where unbounded format strings provided to syslog can lead to arbitrary code execution. Documented impact is remote code execution with the rlprd process p...

CVE-2004-0493

The apgetmimeheaderscore function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service memory exhaustion, and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters...

CVE-2004-0609

rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail...

CVE-2004-0623

Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog...

CVE-2004-0451

CVE-2004-0451 describes multiple format-string vulnerabilities in the Software Upgrade Protocol (SUP) affecting the internal logging functions logquit, logerr, and loginfo. The underlying issue allows a remote attacker to cause arbitrary code execution via format specifiers contained in syslog me...

CVE-2004-0604

The CVE-2004-0604 issue affects giFT-FastTrack up to version 0.8.6 (and earlier), where the HTTP client and server can be triggered remotely to crash via an empty search query, causing a NULL dereference and Denial of Service. Public sources in the connected documents confirm a remote DoS impact ...

CVE-2004-0480

Affected software: IBM Lotus Notes 6.0.3–6.5. Vulnerability: argument injection via a notes: URI that uses a UNC network share path to supply an alternate notes.ini for notes.exe, enabling remote code execution. Root cause (as described): insufficient argument filtering on the URI handler, allowi...

CVE-2004-0454

CVE-2004-0454 is a buffer overflow in the msg() function of the rlpr(rlprd) daemon (rlprd v2.04) that allows a local user to execute arbitrary code. Public references (NVD, Debian DSA-524, OSV, OpenVAS, etc.) corroborate a local-execution impact. Remediation per Debian DSA-524-1 is to update the ...

CVE-2004-0606

Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...

CVE-2004-0603

CVE-2004-0603 relates to gzip (gzexe) in versions 1.3.3 and earlier. The vulnerability arises when temporary file creation fails: gzexe will continue execution instead of exiting, potentially allowing remote attackers or local users to run arbitrary commands. The issue is documented in various ad...

CVE-2004-0616

The vulnerability CVE-2004-0616 affects the BT Voyager 2000 Wireless ADSL Router, where a default public SNMP community name allows remote attackers to obtain sensitive information (plaintext password). Root cause: default SNMP community name. Impact: confidentiality is partially affected; exploi...

CVE-2004-0620

The CVE-2004-0620 issue affects vBulletin versions around 3.0.1, where the XSS flaw exists in the newreply.php and newthread.php code (Edit-panel) that allows a remote attacker to inject HTML/script as another user. OpenVAS entries frame this as a vulnerability in vBulletin

CVE-2004-0493

The apgetmimeheaderscore function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service memory exhaustion, and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters...

CVE-2004-0622

Apple Mac OS X 10.3.4, 10.4, 10.5 (and possibly other versions) do not properly clear memory for login (Loginwindow.app), Keychain, or FileVault passwords, which could allow a local attacker or someone with physical access to read sensitive information from memory. The affected components are the...

CVE-2004-0614

osTicket implements a trust-based upload size check using a hidden form field in the submit form, which could allow a remote attacker to upload a file of any size. Reported across CVE-2004-0614 with an impact of partial integrity and partial availability, potentially enabling a denial-of-service ...

CVE-2004-0624

PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 artmediclinks5 allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code...

[Full-Disclosure] DoS in popclient 3.0b6

DoS in popclient 3.0b6 ---------------------- Release Date: 29th June 2004 Discovery: Dean White [email protected] Research: John Cartwright [email protected] Overview -------- "popclient is a Post Office Protocol compliant mail retrieval client which supports both POP2 as specified in RFC 9...

CVE-2004-0460

Buffer overflow in the logging capability for the DHCP daemon DHCPD for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service server crash and possibly execute arbitrary code via multiple hostname options in 1 DISCOVER, 2 OFFER, 3 REQUEST, 4 ACK, or 5 NAK messages,...