CVE-2004-0515

Technical details for CVE-2004-0515 are not publicly available in the provided documents. Monitor for updates. The materials mention a vulnerability in Mac OS X 10.3.4 related to the handling of console log files, but no specifics are given.

CVE-2004-0435

Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MSINVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk...

CVE-2004-0507

Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0419

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions...

CVE-2004-0228

Integer signedness error in the cpufreq proc handler cpufreqprocctl in Linux kernel 2.6 allows local users to gain privileges...

CVE-2004-0505

The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service assert error via unknown attack vectors...

CVE-2004-0505

CVE-2004-0505 affects Ethereal (Wireshark) with the AIM dissector. The advisory notes that Ethereal versions prior to the fixed release (e.g., 0.10.x up to 0.10.3) are vulnerable and can trigger an assertion error leading to a denial of service. The OpenVAS/Gentoo/GNU advisories corroborate a vul...

CVE-2004-0490

CVE-2004-0490 affects cPanel when compiling Apache 1.3.29 with mod_phpsuexec; it does not set --enable-discard-path, so PHP uses SCRIPT_FILENAME instead of PATH_TRANSLATED, enabling local users to run the attacker’s script with the user’s privileges. This is a local vulnerability with complete co...

CVE-2004-0487

Summary: CVE-2004-0487 corresponds to a vulnerability in Symantec Norton AntiVirus 2004 involving a vulnerable ActiveX control. The connected advisory confirms a remote attacker could trigger a denial-of-service condition by calling a specific method of this ActiveX control, with potential for ar...

CVE-2004-0502

CVE-2004-0502 affects Microsoft Outlook 2003. When replying to an email, Outlook 2003 stores certain files in a predictable location used as the src of an img tag in the original message. This behavior can allow remote attackers to bypass zone restrictions and potentially exploit other issues tha...

CVE-2004-0504

CVE-2004-0504 is a vulnerability in Ethereal where a SIP message exchange (between Hotsip servers and clients) can crash the dissector, effective in Ethereal versions prior to the 0.10.4 release. Related entries (RHSA-2004:234, Gentoo GLSA 200406-01, OpenVAS entries) indicate multiple vendors and...

CVE-2004-0518

CVE-2004-0518 affects AppleFileServer on Mac OS X 10.3.4. The vulnerability is associated with the use of SSH and reporting errors; impact and attack vectors are unknown. CVSS2 base score 7.5 (HIGH) with network attack vector, low complexity, no authentication required, and partial confidentialit...

CVE-2004-0175

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

CVE-2004-0412

Mailman prior to version 2.1.5 is affected by CVE-2004-0412. A crafted email request to the Mailman server can allow a remote attacker to obtain user passwords, per the description in multiple sources (Mailman password disclosure). The vulnerability stems from how password data could be disclosed...

CVE-2004-0523

Multiple buffer overflows in krb5anametolocalname for MIT Kerberos 5 krb5 1.3.3 and earlier allow remote attackers to execute arbitrary code as root...

CVE-2004-0175

CVE-2004-0175 is a directory traversal via scp in OpenSSH prior to 3.4p1, enabling a remote server to overwrite arbitrary files on the client. Root cause is improper path handling in scp. Affected product: OpenSSH (scp component). Impact: allows remote file overwrites. Mitigation: upgrade to Open...

Orenosv HTTP/FTP Server 0.5.9 - GET Denial of Service (3)

source: https://www.securityfocus.com/bid/10420/info Orenosv HTTP/FTP server is prone to a denial of service vulnerability that may occur when an overly long HTTP GET request is sent to the server. When the malicious request is handled, it is reported that both the HTTP and FTP daemons will stop...

CVE-2004-0156

Format string vulnerabilities in the 1 die or 2 logevent functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0116

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...

CVE-2004-0157

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program...