8091 matches found
CVE-2004-1918
RSniff 1.0 allows remote attackers to cause a denial of service connection exhaustion via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly...
CVE-2004-1915
Buffer overflow in the parseallclientmessages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments...
CVE-2004-1917
Format string vulnerability in testfuncfunc in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable...
DEBIAN-CVE-2004-1917
Format string vulnerability in testfuncfunc in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable...
CVE-2004-1916
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via 1 a long invalid command to parseallclientmessages function, or 2 long argv command to testfuncfunc function...
CVE-2004-0383
Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."...
CVE-2004-0382
Technical details are not publicly available in the provided documents for CVE-2004-0382. Monitor for updates; the entries show unknown impact and lack concrete root cause/exploit information.
CVE-2004-0379
CVE-2004-0379 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001. The affected component is three scripts within SharePoint Portal Server 2001, where XSS could allow remote attackers to process arbitrary web content and steal cookies via ...
CVE-2004-0386
The CVE-2004-0386 vulnerability affects MPlayer 1.0pre3 and earlier (including 0.90 and 0.91) and arises from a buffer overflow in the HTTP parser triggered by a long Location header. Exploitation could allow remote code execution. Multiple connected advisories (SUSE, Gentoo GLSA, OpenVAS/Nessus ...
CVE-2004-0386
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header...
Security fix for the ALT Linux 5 package cvs version 1.11.14-alt2
April 7, 2004 Dmitry V. Levin 1.11.14-alt2 - Applied upstream pserver client fixes CAN-2004-0180...
CVE-2004-0370
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic...
CVE-2004-0183
CVE-2004-0183 affects tcpdump up to version 3.8.1. The issue arises in the ISAKMP payload handling module: processing a Delete payload with a large number of SPIs can trigger an out-of-bounds read, leading to a denial of service (crash) of tcpdump. The description and multiple advisories in conne...
CVE-2004-0377
Buffer overflow in the win32stat function for 1 ActiveState's ActivePerl and 2 Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character...
CVE-2004-0380
The CVE-2004-0380 issue affects the MHTML URL Processing Vulnerability in Microsoft Outlook Express 5.5 SP2 through 6 SP1, rooted in the MHTML/ITS handling and cross-domain logic. A remote attacker could cause HTML/CHM content to execute arbitrary code in the Local Machine Zone by exploiting ITS,...
CVE-2004-0371
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path...
CVE-2004-0366
Removed by vendor...
CVE-2004-0366
CVE-2004-0366 affects libpam-pgsql (pam-pgsql) with a SQL injection vulnerability present in versions prior to 0.5.2. The underlying issue is missing input sanitising that allows an attacker to insert arbitrary SQL statements when data is sent to PostgreSQL. Debian and OpenVAS entries document th...
CVE-2004-0371
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path...