8091 matches found
CVE-2004-0528
CVE-2004-0528 affects Netscape Navigator 7.1. An attacker can spoof a legitimate URL in the status bar by crafting A HREF tags with modified alt values pointing to the legitimate site, paired with an image map whose href points to the malicious site, facilitating a phishing attack. Exploitation d...
CVE-2004-0536
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report...
CVE-2004-0522
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges...
CVE-2004-0529
The modified suexec program in cPanel, when configured for modphp and compiled for Apache 1.3.31 and earlier without modphpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as 1 proftpdvhosts or 2 addalink.cgi, a...
CVE-2004-0525
HP Integrated Lights-Out iLO 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service hang by accessing iLO using the TCP/IP reserved port zero...
CVE-2004-0540
CVE-2004-0540 affects Microsoft Windows 2000 domain authentication: if the domain FQDN is exactly eight characters, the system does not prevent logons by users with expired passwords, constituting an authentication bypass in the domain logon flow. The connected advisory (CPAI-2015-0384) corrobora...
CVE-2004-0450
The CVE-2004-0450 entry concerns a format-string vulnerability in log2mail (printlog) prior to version 0.2.5.2. A logged message crafted to exploit the format string could be processed by log2mail and cause arbitrary code execution with the privileges of the log2mail process (often a member of ad...
CVE-2004-0537
Opera 7.50 and earlier is vulnerable to address bar spoofing via the favicon feature. The weakness allows remote web pages to provide a favicon that is wider than expected, enabling spoofing of the apparent domain and facilitating phishing using a wide icon and added spaces. Concrete details acro...
CVE-2004-0530
Summary: CVE-2004-0530 affects the PHP package in Slackware 8.1, 9.0, and 9.1. When these packages are linked against a static library, they include /tmp in the library search path, enabling local users to execute arbitrary code as the PHP user by placing shared libraries in the appropriate path....
CVE-2004-0526
Unknown versions of Internet Explorer and Outlook are affected by a phishing-related vulnerability that allows remote attackers to spoof a legitimate URL in the status bar. The issue arises from crafting A HREF tags with modified alt values pointing to the legitimate site, combined with an image ...
CVE-2004-0535
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources...
CVE-2004-0524
The CVE-2004-0524 entry describes a buffer overflow in the chpasswd command of the Change_passwd plugin (before 4.0) used by SquirrelMail. The vulnerability allows local users to gain root privileges through a long user name. The NVD entry assigns a base score of 10.0 (HIGH) with local, low-compl...
CVE-2004-0522
CVE-2004-0522 affects Gallery; multiple OpenVAS entries document a remote authentication bypass that lets an attacker gain administrator privileges. Vulnerable are Gallery versions up to 1.4.3 (and variants prior to 1.4.3-pl1 per Nessus notes) with a network-based attack surface (CVSS v2 base 10....
CVE-2004-0535
CVE-2004-0535 relates to the Linux kernel's e1000 NIC driver (2.4.x and earlier) where memory used by the driver was not properly initialized before access. This could permit a local attacker to read portions of kernel memory. The issue is documented and linked to several vendor advisories (e.g.,...
CVE-2004-0537
Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" favicon that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces...
Squid 2.5.x-3.x NTLM Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
CVE-2004-0487
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service resource consumption and possibly execute arbitrary programs...
CVE-2004-0134
The CVE-2004-0134 issue affects SGI IRIX prior to 6.5.25 where the cpr (libcpr) component can load a user-provided library during restart of a checkpointed process, allowing local privilege elevation. The vulnerability is tied to IRIX checkpoint/restart handling and could grant root-equivalent ac...
CVE-2004-0521
CVE-2004-0521 affects SquirrelMail prior to version 1.4.3 RC1 through an SQL injection in abook_database.php. Root cause: improper input handling allows remote attackers to execute arbitrary SQL statements. Impact (per sources): confidentiality, integrity, and availability may be fully compromise...