6866 matches found
CVE-2004-0330
CVE-2004-0330 is a buffer overflow in the MDTM handling of Serv-U FTP Server (pre-5.0.0.4). The vulnerability allows remote authenticated attackers to execute arbitrary code by sending a crafted MDTM timezone parameter. Public references show exploitation tooling and disclosures (Metasploit modul...
CVE-2004-0351
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data...
CVE-2004-0283
CVE-2004-0283 affects Mailmgr 1.2.3, where local users can overwrite arbitrary files via a symlink attack against /tmp/mailmgr.unsort, /tmp/mailmgr.tmp, or /tmp/mailmgr.sort. The root cause is improper handling of temporary files that allows a local attacker to leverage symlinks to redirect file ...
CVE-2004-0284
CVE-2004-0284 affects Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003. The vulnerability allows a remote attacker to cause a denial of service (CPU consumption) when the user views a web site or HTML e‑mail that contains two null characters (%00) after the host name, and the setti...
CVE-2004-0334
InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to 1 videophoneadmindetail.asp, 2 videophonesyscfg.asp, 3 videophoneupgrade.asp, or 4 videophonesysctrl.asp that contains a trailing / slash. NOTE: the original report mentioned AXIS 2100 Network Camera...
CVE-2004-0354
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to 1 the info function in log.c, 2 the anubiserror function in errs.c, or 3 the sslerror function in ssl.c...
CVE-2004-0244
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 MSFC2 and a FlexWAN or OSM module allow local users to cause a denial of service hang or reset by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet...
CVE-2004-0299
CVE-2004-0299 refers to a buffer/DoS issue in SmallFTPD. The consolidated data shows that an FTP request containing a large number of "/" characters can trigger a denial of service (crash) on affected SmallFTPD versions (notably referenced as 0.99 in the CVE description and as
CVE-2004-0287
Xlight FTP Server 1.52 is vulnerable to a remote denial-of-service via a RETR command with an excessively long argument containing many slash characters, which may trigger a buffer overflow and crash the service. The issue requires authenticated access and affects the server version 1.52 (as cite...
CVE-2004-0360
CVE-2004-0360 describes an unknown vulnerability in Solaris 8/9 passwd(1) that enables local privilege escalation via a circ() stack-based overflow. Public artifacts (Exploit-DB, 0day) document local root exploits exploiting a circ() buffer overflow and, in some descriptions, a ret-into-ld.so tec...
CVE-2004-0264
CVE-2004-0264 affects palmhttpd for PalmOS. The vulnerability allows remote attackers to cause a denial of service (crash) by opening two simultaneous HTTP connections, which overloads the PalmOS accept queue. The available documents confirm the affected component and the underlying cause (satura...
CVE-2004-0327
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. dot dot sequences in the clang parameter...
CVE-2004-0339
Cross-site scripting XSS vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter...
CVE-2004-0268
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service hang via 1 a long cd command to the FTP server, or 2 a long dir command to the telnet server...
CVE-2004-0251
The CVE-2004-0251 issue affects the web CGI component rxgoogle.cgi. The concrete vulnerability is a Cross-site Scripting (XSS) flaw in the rxgoogle.cgi query parameter, which can allow remote attackers to execute arbitrary script in the context of other users. The available connected records stat...
CVE-2004-0249
CVE-2004-0249 affects PHPX 2.0–3.2.4. The vulnerability arises from allowing an attacker to modify the cookie PXL to reference a different userID, enabling remote access to other accounts. This leads to complete confidentiality and integrity impact. The NVD metrics indicate a network-accessible, ...
CVE-2004-0318
CVE-2004-0318 affects Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x. The vulnerability arises because LSF_EAUTH_UID may be used in place of the real user UID, enabling remote attackers within the local cluster to gain privileges. The underlying issue is the handling of an environment var...
CVE-2004-0314
The CVE-2004-0314 entry describes an XSS flaw in WebzEdit up to version 1.9, exploitable via the message parameter in done.jsp. The underlying issue enables remote attackers to execute arbitrary script in the context of other users, with the impact limited to partial integrity and no confidential...
CVE-2004-0244
Cisco 6000/6500/7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or Optical Services Module (OSM) are affected by a crafted layer-2 frame vulnerability. A layer-2 frame that encapsulates a layer-3 packet with inconsistent length can cause the device to freeze or res...