CVE-2004-0137

CVE-2004-0137 = Unknown vulnerability in IRIX init affecting IRIX 6.5.20 through 6.5.24. Local users can cause a denial of service (system panic) due to page invalidation issues. The NVD/NVD-derived entries confirm local-exploit viability with impact limited to availability (partial) and no confi...

CVE-2004-0579

The CVE-2004-0579 entry concerns the Debian-related format-string vulnerability in the program named “super.” Public documentation in the connected sources confirms that this flaw exists in versions prior to 3.23 and allows a local user to execute arbitrary code with root privileges due to a faul...

CVE-2004-0584

CVE-2004-0584 refers to an input validation vulnerability in Horde IMP up to version 3.2.3 (and earlier) that can allow remote attackers to inject script via HTML or script in email messages, potentially triggering a cross-site scripting (XSS) condition. Affected software: Horde IMP 3.2.3 and ear...

CVE-2004-0588

Cross-site scripting XSS vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages...

CVE-2004-0136

The CVE-2004-0136 issue affects IRIX 6.5.20–6.5.24 via the mapelf32exec system call, enabling a local attacker to trigger a denial-of-service (system crash) by processing a malformed binary. SGI’s Security Advisory 20040601-01-P notes this as CAN-2004-0136 and provides fixes: upgrade to IRIX 6.5....

CVE-2004-0588

The CVE-2004-0588 entry describes an XSS vulnerability in Usermin’s web mail module (version around 1.070) that allows remote attackers to inject arbitrary HTML/script via e-mail messages. Affected software is Usermin, with the issue arising from improper sanitization of email content, enabling s...

CVE-2004-0586

CVE-2004-0586 affects the ActiveX control in the product “acpRunner ActiveX 1.2.5.0.” The vulnerability allows remote attackers to execute arbitrary code through the following methods: DownLoadURL , SaveFilePath , and Download ActiveX . The provided documents state that remote code execution is p...

CVE-2004-0589

Cisco IOS 11.1x through 11.3x and 12.0x through 12.2x, when configured for BGP routing, allows remote attackers to cause a denial of service device reload via malformed BGP 1 OPEN or 2 UPDATE messages...

CVE-2004-0583

The CVE-2004-0583 entry concerns Webmin 1.140 and Usermin 1.070 where the account lockout function fails to parse certain character strings, enabling remote brute-force attempts to guess user IDs and passwords. Root cause: input parsing flaw in the account lockout logic. Impact is limited to unau...

CVE-2004-0580

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information...

CVE-2004-0589

Cisco IOS versions 11.1(x)–11.3(x) and 12.0(x)–12.2(x), when BGP is configured, are susceptible to denial of service via malformed BGP OPEN or UPDATE messages, potentially triggering a device reload. The CVE entry CVE-2004-0589 is supported by vendor advisories and vulnerability notes describing ...

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0492

Apache mod_proxy vulnerability CVE-2004-0492 is a heap-based overflow in proxy_util.c affecting Apache 1.3.25–1.3.31. A remote attacker can trigger a denial of service (process crash) and possibly execute arbitrary code by sending a negative Content-Length header, causing excessive data copy. The...

CVE-2004-0125

The CVE-2004-0125 issue affects the FreeBSD jail subsystem (jail(2)) in FreeBSD 4. x prior to 4.10-RELEASE. A programming error failed to verify that routing-table manipulation originated from a jailed process, allowing a privileged jailed process to modify the host’s routing tables. This could c...

Linux Kernel i2c Integer Overflow Vulnerability

Product: Linux Kernel i2c driver Versions: 2.4.x Bug: Integer Overflow Impact: Kernel Panic Code execution with kernel privs Risk: High/Medium Date: June 16, 2004 Author: shaun2k2 http://www.nettwerked.co.uk Introduction The Linux Kernel is the core of the Linux Operating System, and provides the...

CVE-2004-0550

Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." period characters...

CVE-2004-0554

CVE-2004-0554 affects the Linux kernel (2.4.x and 2.6.x on x86). The root cause is a local-denial-of-service condition triggered by an infinite loop that abuses a sequence of fsave/frstor instructions in a signal handler (as demonstrated by crash.c). The practical impact is a system crash/DoS wit...

CVE-2004-0549

The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine MSHTML, as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript,...

CVE-2004-0549

The CVE-2004-0549 vulnerability is a cross-domain navigation/redirect issue in the Internet Explorer rendering stack (WebBrowser ActiveX or MSHTML) used by IE6 and other IE-enabled components. A remote attacker could abuse navigation via delayed HTTP redirects (or manipulated Location headers) an...

CVE-2004-0550

CVE-2004-0550 describes a buffer overflow in RealNetworks RealPlayer 10 that allows remote code execution when a user visits a URL containing a large sequence of periods. Affected: RealPlayer 10 (RealNetworks). Exploitation described as remote and requires no user interaction in the NVD entry, wi...