CVE-2004-0177

The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0157

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program...

CVE-2004-0180

The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405...

CVE-2004-2039

e107 0.615 allows remote attackers to obtain sensitive information via a direct request to 1 altnews.php, 2 backendmenu.php, 3 clockmenu.php, 4 countermenu.php, 5 loginmenu.php, and other files, which reveal the full path in a PHP error message...

CVE-2004-0489

CVE-2004-0489 describes an argument injection vulnerability in the SSH URI handler for Safari on macOS 10.3.3 and earlier. The flaw allows remote attackers to execute arbitrary code via the ProxyCommand option or to perform port forwarding using the -R option. Affected software is Safari on macOS...

CVE-2004-0485

CVE-2004-0485 concerns the default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8. The underlying issue allows a remote attacker to cause a disk image file (.dmg) to be mounted as a disk volume, enabling writing of arbitrary files. The description in the connected records confirm...

CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

CVE-2004-0486

CVE-2004-0486 affects Apple Mac OS X HelpViewer in 10.3.3 and 10.2.8, where it can process scripts it did not initiate, potentially allowing arbitrary code execution. The issue originated from a directory-traversal vulnerability in the Safari runscript handling within a help: URI, identified as C...

CVE-2004-0485

The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file .dmg to be mounted as a disk volume...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-0489

Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to 1 execute arbitrary code via the ProxyCommand option or 2 conduct port forwarding via the -R option...

CVE-2004-0488

The provided documents confirm CVE-2004-0488: a stack-based buffer overflow in the ssl_util_uuencode_binary function of ssl_util.c used by Apache mod_ssl when configured to trust the issuing CA. This can allow remote code execution via a client certificate with a long subject DN. The issue affect...

CVE-2004-0402

CVE-2004-0402 concerns the xpcd package, specifically the xpcd-svga component, where a buffer overflow in the pcd_open function can copy user-supplied data into a fixed-size buffer. Connected advisories (Debian DSA-508, Mandrake MDKSA-2004:053, Ubuntu/Debian/NVD entries) confirm the vulnerability...

CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

CVE-2004-0397

CVE-2004-0397 affects Subversion up to 1.0.2. A stack-based overflow occurs in the apr_time_t date conversion code, exploitable remotely via svnserver over svn:// (and via DAV2 REPORT/get-dated-rev commands). Consequences include remote arbitrary code execution. Remediation indicated by connected...

CVE-2004-0397

Stack-based buffer overflow during the aprtimet data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a 1 DAV2 REPORT query or 2 get-dated-rev svn-protocol command...

CVE-2004-2135

cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption...

CVE-2004-2035

MiniShare 1.3.2 allows remote attackers to cause a denial of service crash via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences...

[Full-Disclosure] Orenosv HTTP/FTP Server Denial Of Service

SP Research Labs Advisory x13 ----------------------------- Orenosv HTTP/FTP Server Denial Of Service ----------------------------------------- Versions: orenosv059f Vendor: http://hp.vector.co.jp/authors/VA027031/orenosv/indexen.html Date Released - 5.25.2004 ------------------------------------...