CVE-2004-0292

Summary: CVE-2004-0292 concerns Sami HTTP Server (KarjaSoft) 1.0.4. The vulnerability is a buffer overflow triggered by a long HTTP GET request, allowing remote attackers to cause a crash (DoS) and potentially execute arbitrary code. The OpenVAS entries also reference Sami HTTP Server v1.0.4 or o...

CVE-2004-0254

CVE-2004-0254 describes a cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x that allows a remote attacker to execute arbitrary script as other users via an img tag. The NVD entry lists a base score of 6.8 (Medium) with Network attack vector, no authentication, and partial impa...

CVE-2004-0325

TYPSoft FTP Server 1.10 is affected by a Denial of Service vulnerability. The issue allows remote authenticated users to cause CPU exhaustion by sending crafted "//../" path arguments to multiple FTP commands (mkd, xmkd, dele, size, retr, stor, appe, rnfr, rnto, rmd, xrmd) as demonstrated with "/...

CVE-2004-0308

Unknown vulnerability in Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS15600 before 1.30 allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell...

CVE-2004-0329

FreeChat 1.1.1a allows remote attackers to cause a denial of service crash via certain unexpected strings, as demonstrated using "aaaaa"...

CVE-2004-0251

Cross-site scripting XSS vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter...

CVE-2004-0313

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long 1 GET argument or 2 method name...

CVE-2004-0287

Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service crash via a RETR command with a long argument containing a large number of / slash characters, possibly triggering a buffer overflow...

CVE-2004-0248

Cross-site scripting vulnerability XSS in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into 1 keywords argument of main.inc.php, 2 body argument of help.inc.php, or 3 the subject field in Personal Messages and Forum...

CVE-2004-0245

Web Crossing 4.x and 5.x are affected. The vulnerability allows remote attackers to cause a crash/denial of service by sending an HTTP POST with a large or negative Content-Length, triggering an integer divide-by-zero in the affected component. The available sources (NVD entry) describe the issue...

CVE-2004-0268

CVE-2004-0268 affects EvolutionX versions 3921 and 3935. The vulnerability consists of multiple buffer overflows that allow a remote attacker to cause a denial of service (hang) by sending a long cd command to the FTP server or a long dir command to the Telnet server. The available records do not...

CVE-2004-0285

PHP remote file inclusion vulnerabilities in include/footer.inc.php in 1 AllMyVisitors, 2 AllMyLinks, and 3 AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the AMVconfigcfgserverpath parameter...

CVE-2004-0302

CVE-2004-0302 describes a directory traversal vulnerability in OWLS 1.0, where remote attackers could read arbitrary files by manipulating the .. (dot dot) in parameters of index.php (file), glossary.php (editfile), or newmultiplechoice.php (editfile). The issue is documented across multiple sour...

CVE-2004-0332

Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges...

CVE-2004-0267

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0315

The CVE-2004-0315 entry concerns a buffer overflow in Avirt Voice 4.0 . A remote attacker can trigger a vulnerability by sending a long GET request on port 1080 , potentially causing a denial of service and, per the NVD entry, possibly execute arbitrary code . The issue is a network-facing vulner...

CVE-2004-0278

The Ratbag game engine (used in Dirt Track Racing, Leadfoot, World of Outlaws Spring Cars) is vulnerable to a remote denial-of-service through crafted TCP traffic: a packet declaring a data length followed by a second packet with less data triggers the engine to repeatedly poll the socket, consum...

CVE-2004-0332

Extremail 1.5.9 contains a password validation flaw where passwords that are all digits or start with a digit bypass checks, enabling remote privilege escalation. Affected software: Extremail 1.5.9. Root cause: improper password verification logic for digit-only or digit-leading passwords. Impact...

CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...

CVE-2004-0316

Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service crash via 1 a large GET request to port 1080 or 2 a large GET request of % characters to port 8080...