CVE-2004-0405

CVS before 1.11 allows CVS clients to read arbitrary files via .. dot dot sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180...

CVE-2004-0389

RealNetworks Helix Universal Server (RealServer) versions 9.0.1–9.0.2 are affected by a remote denial-of-service due to malformed GET_PARAMETER or DESCRIBE requests triggering a null dereference, causing crashes. The issue is documented in CVE-2004-0389 and reflected in advisories/plugins. Mitiga...

CVE-2004-0157

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program...

CVE-2004-0407

The CVE concerns ColdFusion MX 6.1: HTML form upload does not reclaim disk space when uploads are interrupted, enabling a remote attacker to perform a denial of service via repeated interrupted uploads. Affected component is the upload handling; root cause is improper disk space reclamation after...

CVE-2004-0156

ssmtp is affected by format string vulnerabilities in the die() and log_event() functions, enabling a remote mail relay to trigger denial of service or potentially execute code. The issue affects ssmtp prior to version 2.50.6. Public references (Debian DSA-485, Gentoo GLSA-200404-18, OSV and NVD ...

CVE-2004-0182

CVE-2004-0182 affects Mailman before 2.0.13. A flaw allows remote attackers to trigger a denial of service (crash) by sending an email message with an empty subject field. Multiple connected sources corroborate this issue and tie it to a DoS in Mailman. Remediation in the public advisories is to ...

CVE-2004-0389

RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service crash via malformed requests that trigger a null dereference, as demonstrated using 1 GETPARAMETER or 2 DESCRIBE requests...

CVE-2004-0133

CVE-2004-0133 affects the XFS file system code in Linux 2.4.x. The vulnerability allows an information leak by writing in-memory data to the block device hosting XFS, enabling local users to read sensitive kernel data from the raw device. Public advisories describe this as part of a broader set o...

CVE-2004-0157

x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program...

CVE-2004-0182

Removed by vendor...

CVE-2004-0182

Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...

CVE-2004-0181

The CVE-2004-0181 issue is an information leak in the Linux 2.4.x JFS code where in-memory data could be written to the device, allowing a local user to read sensitive information from the raw device. The relevant connected advisories (RHSA-2005:663, CentOS/CESA-2005:663) document this flaw as ad...

CVE-2004-0409

CVE-2004-0409 is a stack-based overflow in XChat’s Socks5 proxy code affecting versions 1.8.0 through 2.0.8 with Socks5 traversal enabled. The vulnerability allows a remote attacker to execute arbitrary code via a crafted SOCKSv5 proxy, as detailed in vendor advisories (Red Hat RHSA-2004:585, Deb...

CVE-2004-0409

Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code...

[SECURITY] [DSA 486-1] New cvs packages fix multiple vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 486-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

void.at - neon format string bugs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 VSA0401 - neon - void.at security notice Overview ======== We have discovered a format string vulnerability in neon http://www.webdav.org/neon. neon is a webdav client library, used by Subversion and others. CVE has assigned the name CAN-2004-0179 to...

CVE-2004-0119

The Negotiate Security Software Provider SSP interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service crash from null dereference or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selectio...

CVE-2004-0118

The component for the Virtual DOS Machine VDM subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code...

CVE-2004-0123

Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code...

CVE-2004-0388

CVE-2004-0388 affects the MySQL server via the mysqld_multi script, allowing a local user to overwrite arbitrary files through a symlink attack. The root cause is insecure handling of temporary/target paths, enabling a symlink-based overwrite. The documented impact is local access with partial in...