CVE-2004-1868

Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag...

CVE-2004-0174

CVE-2004-0174 affects Apache HTTP Server via a denial-of-service condition caused by handling multiple listening sockets. OpenVAS entries describe the vulnerability as applicable to Apache versions older than 2.0.49 or 1.3.31, where a remote attacker can block new connections by targeting a rarel...

CVE-2004-0218

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service infinite loop via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0222

OpenBSD isakmpd (3.4 and earlier) is affected by memory-leak vulnerabilities in ISAKMP packet processing, allowing remote attackers to exhaust memory and cause a denial-of-service. The issue is described in Rapid7 R7-0018 and CERT/OpenBSD advisories, with references to multiple CVEs (CAN-2004-021...

CVE-2004-0218

OpenBSD isakmpd (OpenBSD 3.4 and earlier) is vulnerable to a remote denial of service via crafted ISAKMP packets with a zero-length payload. The issue arises from insufficient validation of payload lengths, allowing an infinite loop or memory-related exhaustion. Rapid7’s R7-0018 advisory and CERT...

CVE-2004-0221

Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...

CVE-2004-0220

CVE-2004-0220 affects OpenBSD isakmpd (OpenBSD 3.4 and older). A malformed Certificate Request payload in ISAKMP can trigger an integer underflow, leading to a failed malloc of a large memory allocation and a denial of service. OpenBSD has issued patches; mitigation is to update/rebuild isakmpd w...

CVE-2004-0368

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0368

CVE-2004-0368 is a double-free vulnerability in the CDE dtlogin daemon that can allow remote code execution with root privileges via crafted XDMCP packets. Affected platforms include Solaris and HP-UX (and related CDE environments), with multiple patches issued (Solaris patches 108920-30 / 108919...

CVE-2004-0365

The dissectattributevaluepairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service crash via a malformed RADIUS packet that triggers a null dereference...

CVE-2004-0365

The CVE-2004-0365 entry affects Ethereal (pcap/RADIUS decoder) with a vulnerability in packet-radius.c (Ethereal 0.8.13 through 0.10.2) that can cause a denial of service via a malformed RADIUS packet triggering a null dereference. Public advisories in connected docs reference vendor fixes (e.g.,...

CVE-2004-0367

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...

CVE-2004-1857

Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. dot dot in the setinclude parameter...

CVE-2004-1859

Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2004-2037

Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client...

CVE-2004-0151

CVE-2004-0151 affects xitalk, with the vulnerability in 1.1.11 and earlier allowing a local user to execute arbitrary commands under the utmp GID. Debian’s DSA-462-1 fixes this by updating xitalk to 1.1.11-9.1woody1 for woody (and related notices for unstable). The issue is a local privilege-rele...

CVE-2004-1884

Ipswitch WSFTP Server 4.0.2 has a backdoor XXSESSMGRYY username with a default password, which allows remote attackers to gain access...

CVE-2004-0362

CVE-2004-0362 affects ISS PAM ICQ parsing in RealSecure/BlackICE/Proventia products. The issue is multiple stack-based buffer overflows in the ICQ server response handling (SRV_MULTI carrying SRV_USER_ONLINE/SRV_META_USER with long nickname/firstname/lastname/email), enabling remote code executio...