8091 matches found
CVE-2004-0516
Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517...
CVE-2004-0516
CVE-2004-0516 refers to an unknown vulnerability in Mac OS X 10.3.4, related to package installation scripts, and is distinct from CVE-2004-0517. The connected sources confirm the affected product and the general vulnerability context but do not specify the root cause, impact details, exploit inf...
CVE-2004-0435
CVE-2004-0435 concerns a vulnerability in FreeBSD where programming errors in the msync(2) implementation, specifically involving the MS_INVALIDATE operation, allow a local user to prevent changes to a file from being written to disk due to cache consistency issues. Affected products include Free...
CVE-2004-0513
CVE-2004-0513 affects Mac OS X up to version 10.3.3; the vulnerability is described as unspecified with unknown impact and attack vectors, specifically tied to logging when tracing system calls. The connected documents corroborate the OS and nature of the issue but do not provide concrete details...
CVE-2004-0412
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...
CVE-2004-0520
CVE-2004-0520 is a cross-site scripting (XSS) vulnerability in mime.php of SquirrelMail prior to 1.4.3. The issue allows remote attackers to inject arbitrary HTML and script via the content-type mail header, demonstrated via read_body.php. The vulnerability affects the webmail client, with an att...
CVE-2004-0517
CVE-2004-0517 affects Mac OS X 10.3.4. It is described as an unknown vulnerability related to the handling of process IDs during package installation, distinct from CVE-2004-0516. The NVD entry lists a low-to-moderate impact with a CVSSv2 base score of 4.6 (local access, low attack complexity, no...
CVE-2004-0523
CVE-2004-0523 relates to MIT Kerberos 5 (krb5) 1.3.3 and earlier, where multiple buffer overflows in krb5_aname_to_localname allow a remote attacker to execute arbitrary code as root. Public details describe the vulnerability, its impact, and vendor responses. Affected products include MIT Kerber...
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...
CVE-2004-0514
CVE-2004-0514 corresponds to a local privilege escalation in Mac OS X (LoginWindow) via Directory Services lookups. CERT/CC notes a vulnerability in Mac OS X 10.3 through 10.3.3 that could allow a local authenticated user with physical access to gain root privileges (applications in the user sess...
CVE-2004-0134
cpr libcpr in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process...
CVE-2004-0228
CVE-2004-0228 refers to an integer signedness error in the cpufreq /proc handler (cpufreq_procctl) of the Linux 2.6 kernel, enabling local users to escalate privileges to kernel level. The issue is discussed in multiple advisories (e.g., SUSE, Gentoo GLSA 200407-02, Fedora 2004-111) as part of Li...
CVE-2004-0507
CVE-2004-0507 describes a buffer overflow in Ethereal’s MMSE dissector affecting versions 0.10.1–0.10.3. The flaw allows remote code execution and denial of service. Connected advisories (GLSA 200406-01, OpenVAS/Red Hat/SUSE entries) confirm a need to update Ethereal to a newer, fixed release (up...
CVE-2004-0506
The CVE-2004-0506 entry concerns Ethereal (0.9.8–0.10.3) where the SPNEGO dissector could dereference NULL, triggering a remote crash/denial of service. The vulnerability is network-exploitable with no authentication and partial availability impact (CVSS v2 base 5.0). Affected advisories (Gentoo ...
CVE-2004-0076
This CVE entry is rejected/not used; the candidate number has been removed by the numbering authority.
CVE-2004-0503
Microsoft Outlook 2003 is affected by CVE-2004-0503 due to a security bypass in RTF handling: lack of validation for certain OLE objects attached to RTF messages may bypass Media Player scripting restrictions and could lead to unprompted executable installation when combined with predictable-file...
CVE-2004-0476
CVE-2004-0476 affects 3Com OfficeConnect Remote 812 ADSL Router (firmware 1.1.9.4). A buffer overflow in the Telnet port handling allows remote attackers to cause a denial of service (reboot or packet loss) by sending a long string containing Telnet escape characters. Exploitation details and spe...
CVE-2004-0501
Affected software : Outlook 2003. What is vulnerable : HTML e-mails containing a Vector Markup Language (VML) entity whose src points to a remote site can cause Outlook to request that remote URL, potentially revealing read status and other information. Cause : Bypass of intended access restricti...
CVE-2004-0501
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language VML entity whose src parameter points to the remote site, which could allow remote attackers to know whe...