CVE-2004-0258

Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed 1 .RP, 2 .RT, 3 .RAM, 4 .RPM or 5 .SMIL files...

CVE-2004-0237

CVE-2004-0237 corresponds to a directory traversal vulnerability in the Aprox PHP Portal, specifically in index.php where the show parameter can be used to read arbitrary files. This is publicly documented in CVE/NVD entries as a vulnerability enabling unauthorized file disclosure. The connected ...

CVE-2004-0272

CVE-2004-0272 describes an SQL injection vulnerability in MaxWebPortal that allows remote attackers to inject arbitrary SQL via the SendTo parameter in Personal Messages, potentially exposing sensitive information. The NVD reports a CVSS v2 base score of 7.5 (HIGH) with network access, low attack...

CVE-2004-0112

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake that causes an...

CVE-2004-0300

The CVE-2004-0300 entry concerns Ecommerce Corporation Online Store Kit 3.0. The vulnerability is a SQL injection in multiple parameters: cat in shop.php, id in more.php, cat_manufacturer in shop_by_brand.php, and id in listing.php. This allows remote attackers to inject arbitrary SQL and gain un...

CVE-2004-0296

TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection...

CVE-2004-0259

The checkreferer function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting XSS issue...

CVE-2004-0313

PSO Proxy 0.91 contains a stack buffer overflow in its HTTP handling. A remote attacker can send an excessively long HTTP request (e.g., a long GET argument or long method name) to overwrite the stack, causing denial of service and potentially executing arbitrary code. Public evidence of exploita...

CVE-2004-0346

CVE-2004-0346 affects ProFTPD 1.2.7–1.2.9rc2, caused by an off-by-one buffer overflow in _xlate_ascii_write() triggered by a crafted RETR command (1023+ bytes). According to the CVE record, this enables local users to gain privileges; PT-2004-1500 also documents a remote-triggered scenario via RE...

CVE-2004-0253

IBM Cloudscape 5.1 running jdk 1.4.203 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability...

CVE-2004-0359

CVE-2004-0359 is an XSS vulnerability in the Invision Power Board 1.3 final, triggered by unvalidated input in index.php via the parameters (c, f, showtopic, showuser, username). The underlying cause is unsanitized user-supplied values leading to script execution in other users’ sessions. The NVD...

CVE-2004-0304

SQL injection vulnerability in browseitems.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the SearchText parameter...

CVE-2004-0294

YaBB 1 SP 1.3.1 is vulnerable to information disclosure via password enumeration. The vulnerability arises because the application displays different error messages when a user exists versus does not exist, enabling remote attackers to determine valid usernames and perform brute‑force password gu...

CVE-2004-0255

Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . dot and / slash characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow...

CVE-2004-0289

The CVE-2004-0289 entry concerns SignatureDB 0.1.1 where a buffer overflow in the sdbscan component can be triggered by a database file containing a large key parameter. This allows local users to cause a denial of service through a segmentation fault. The vulnerability is described in multiple s...

CVE-2004-0333

Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters...

CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

CVE-2004-0217

CVE-2004-0217 affects Symantec AntiVirus Scan Engine on Red Hat Linux (LiveUpdate capability via liveupdate.sh) and allows local users to create or append arbitrary files by exploiting a symlink on /tmp/LiveUpdate.log. Affected versions: 4.0 and 4.3. Root cause: symlink attack in LiveUpdate.log h...

CVE-2004-0107

CVE-2004-0107 affects sysstat up to version 4.0.7. The vulnerability is local and arises from insecure handling of temporary files in the (1) post and (2) trigger scripts, enabling a local user to overwrite arbitrary files via symlink attacks. Root cause: inadequate protections around temporary f...

CVE-2004-0217

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...