CVE-2004-1866

nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service crash via a large packet, which triggers a null dereference...

CVE-2004-1864

SQL injection vulnerability in Extreme Messageboard XMB 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to 1 member.php, 2 misc.php, or 3 today.php...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...

CVE-2004-0174

CVE-2004-0174 affects Apache HTTP Server via a denial-of-service condition caused by handling multiple listening sockets. OpenVAS entries describe the vulnerability as applicable to Apache versions older than 2.0.49 or 1.3.31, where a remote attacker can block new connections by targeting a rarel...

CVE-2004-0220

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Tes...

CVE-2004-0367

Technical details about CVE-2004-0367 are not publicly provided in the connected documents. Monitor for updates in the supplied sources.

CVE-2004-0174

Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service blocked new connections via a "short-lived connection on a rarely-accessed listening socket."...

CVE-2004-0219

OpenBSD isakmpd vulnerability CVE-2004-0219 stems from flaws in ISAKMP packet handling, where malformed IPSEC SA payloads can trigger out-of-bounds reads and crash the daemon, causing remote denial of service. Affected: OpenBSD 3.4 and earlier (and related OpenBSD patches for -current/-stable). E...

CVE-2004-0149

CVE-2004-0149 affects the game xboing prior to version 2.4. Multiple buffer overflows enable a local attacker to gain privileges (reported as able to drop a shell with gid 'games' due to improper bounds checking and unsafe environment-variable use in highscore.c). The issue is confirmed across mu...

CVE-2004-1868

Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag...

CVE-2004-0221

Affected software / component: OpenBSD isakmpd (OpenBSD 3.4 and earlier). Root cause / weakness: Multiple payload handling flaws in isakmpd’s ISAKMP packet processing allow out-of-bounds reads when processing a Delete payload with a large number of SPIs, leading to a remote denial of service (cra...

CVE-2004-0222

OpenBSD isakmpd (3.4 and earlier) is affected by memory-leak vulnerabilities in ISAKMP packet processing, allowing remote attackers to exhaust memory and cause a denial-of-service. The issue is described in Rapid7 R7-0018 and CERT/OpenBSD advisories, with references to multiple CVEs (CAN-2004-021...

CVE-2004-0368

Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet...

CVE-2004-0218

isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service infinite loop via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0218

OpenBSD isakmpd (OpenBSD 3.4 and earlier) is vulnerable to a remote denial of service via crafted ISAKMP packets with a zero-length payload. The issue arises from insufficient validation of payload lengths, allowing an infinite loop or memory-related exhaustion. Rapid7’s R7-0018 advisory and CERT...

CVE-2004-0220

CVE-2004-0220 affects OpenBSD isakmpd (OpenBSD 3.4 and older). A malformed Certificate Request payload in ISAKMP can trigger an integer underflow, leading to a failed malloc of a large memory allocation and a denial of service. OpenBSD has issued patches; mitigation is to update/rebuild isakmpd w...

CVE-2004-0368

CVE-2004-0368 is a double-free vulnerability in the CDE dtlogin daemon that can allow remote code execution with root privileges via crafted XDMCP packets. Affected platforms include Solaris and HP-UX (and related CDE environments), with multiple patches issued (Solaris patches 108920-30 / 108919...

CVE-2004-0222

Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service memory exhaustion via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite...

CVE-2004-0367

Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service crash via a zero-length Presentation protocol selector...

CVE-2004-0365

The dissectattributevaluepairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service crash via a malformed RADIUS packet that triggers a null dereference...