CVE-2004-0268

Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service hang via 1 a long cd command to the FTP server, or 2 a long dir command to the telnet server...

CVE-2004-0249

CVE-2004-0249 affects PHPX 2.0–3.2.4. The vulnerability arises from allowing an attacker to modify the cookie PXL to reference a different userID, enabling remote access to other accounts. This leads to complete confidentiality and integrity impact. The NVD metrics indicate a network-accessible, ...

CVE-2004-0264

CVE-2004-0264 affects palmhttpd for PalmOS. The vulnerability allows remote attackers to cause a denial of service (crash) by opening two simultaneous HTTP connections, which overloads the PalmOS accept queue. The available documents confirm the affected component and the underlying cause (satura...

CVE-2004-0360

Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...

CVE-2004-0334

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to 1 videophoneadmindetail.asp, 2 videophonesyscfg.asp, 3 videophoneupgrade.asp, or 4 videophonesysctrl.asp that contains a trailing / slash. NOTE: the original report mentioned AXIS 2100 Network Camera...

CVE-2004-0242

X-Cart 3.4.3 is affected by CVE-2004-0242. An attacker can remotely read sensitive information by supplying a mode parameter that triggers phpinfo or perlinfo commands. The vulnerability enables information disclosure in the affected product via the web interface; no exploitation or mitigations a...

CVE-2004-0324

Technical details are not publicly provided in the provided documents. Available entries reiterate that CVE-2004-0324 involves arbitrary code execution via shell metacharacters in an email header; no confirmed affected products or versions are listed here. Monitor for updates.

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0278

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

CVE-2004-0244

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...

CVE-2004-0351

Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data...

CVE-2004-0345

Affected software: Red Faction client 1.20 and earlier. The issue is a buffer overflow that allows a remote server to execute arbitrary code via a long server name. This CVE entry does not include explicit remediation details in the provided documents. The exploitation status is not stated.

CVE-2004-0279

AIM Sniff (aimSniff.pl) 0.9b is affected. A local user can overwrite arbitrary files via a symlink attack on /tmp/AS.log, indicating a local file overwrite vulnerability in this tool. The provided connected documents confirm the affected component and the root cause (symlink leading to /tmp/AS.lo...

CVE-2004-0283

CVE-2004-0283 affects Mailmgr 1.2.3, where local users can overwrite arbitrary files via a symlink attack against /tmp/mailmgr.unsort, /tmp/mailmgr.tmp, or /tmp/mailmgr.sort. The root cause is improper handling of temporary files that allows a local attacker to leverage symlinks to redirect file ...

CVE-2004-0349

Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. dot dot in the URL...

CVE-2004-0259

The CVE affects Formmail.php version 5.0 and earlier, where check_referer() can be bypassed by an empty or spoofed HTTP Referer, enabling access restriction bypass. The vulnerability is demonstrated via an application on the same web server that contains an associated cross-site scripting (XSS) i...

CVE-2004-0266

Affects Php-Nuke 6.x to 7.1.0 where the SQL injection vulnerability is in the public_message capability (c_mid parameter) that can disclose the administrator password. Exploitation details or specific patches are not provided in the connected documents. The OpenVAS/Nessus references confirm long-...

CVE-2004-0079

The dochangecipherspec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that triggers a null dereference...

CVE-2004-0296

CVE-2004-0296 affects TsFtpSrv.exe in Broker FTP 6.1.0.0. The vulnerability arises when an attacker opens and immediately closes a connection, causing TsFtpSrv.exe to exit with an exception. This is a network-based issue with low attack complexity and no authentication required, leading to partia...

CVE-2004-0321

CVE-2004-0321 affects Team Factor 1.25 and earlier. A remote attacker can crash the service by sending a packet where the data block size is a negative number, causing Team Factor to read unallocated memory and trigger a denial of service. The available descriptions consistently state this issue ...