CVE-2004-0241

X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perlbinary argument in 1 upgrade.php or 2 general.php...

CVE-2004-0337

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

CVE-2004-0275

CVE-2004-0275 describes a SQL injection vulnerability in BosDates

CVE-2004-0341

CVE-2004-0341 affects WFTPD Pro Server 3.21 Release 1 . The flaw arises because the server allocates memory for a command until a 0x0A (newline) is received, enabling a local attacker to cause a denial of service (CPU consumption) by sending a long command that never contains a newline. The NVD e...

CVE-2004-0081

CVE-2004-0081 affects OpenSSL 0.9.6 prior to 0.9.6d. The issue is that OpenSSL does not properly handle unknown TLS/SSL message types, enabling a remote attacker to trigger a denial of service via an infinite loop (demonstrated with the Codenomicon TLS Test Tool). Impact is a network-based DoS; e...

CVE-2004-0281

Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows...

CVE-2004-0258

CVE-2004-0258 affects RealNetworks RealPlayer family (RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, RealPlayer Enterprise). The issue is multiple buffer overflows caused by improper handling of certain metafiles and streaming-image files, allowing remote attackers to execute arb...

CVE-2004-0325

TYPSoft FTP Server 1.10 is affected by a Denial of Service vulnerability. The issue allows remote authenticated users to cause CPU exhaustion by sending crafted "//../" path arguments to multiple FTP commands (mkd, xmkd, dele, size, retr, stor, appe, rnfr, rnto, rmd, xrmd) as demonstrated with "/...

CVE-2004-0268

CVE-2004-0268 affects EvolutionX versions 3921 and 3935. The vulnerability consists of multiple buffer overflows that allow a remote attacker to cause a denial of service (hang) by sending a long cd command to the FTP server or a long dir command to the Telnet server. The available records do not...

CVE-2004-0245

Web Crossing 4.x and 5.x are affected. The vulnerability allows remote attackers to cause a crash/denial of service by sending an HTTP POST with a large or negative Content-Length, triggering an integer divide-by-zero in the affected component. The available sources (NVD entry) describe the issue...

CVE-2004-0238

CVE-2004-0238 affects Overkill (0verkill) 0.15pre3. The vulnerability consists of multiple buffer overflows in the client: via a long HOME environment variable in the load_cfg and save_cfg functions (local escalation to arbitrary code). It may also allow remote code execution through long strings...

CVE-2004-0255

CVE-2004-0255 affects Xlight FTP Server (example given: v1.52 with log-to-screen enabled). The vulnerability allows remote attackers to cause a denial of service by requesting a long directory consisting of '.' and '/' characters, which crashes the server when an administrator views the log file ...

CVE-2004-0308

Unknown vulnerability in Cisco ONS 15327 before 4.13, ONS 15454 before 4.61, ONS 15454 SD before 4.13, and Cisco ONS15600 before 1.30 allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell...

CVE-2004-0285

PHP remote file inclusion vulnerabilities in include/footer.inc.php in 1 AllMyVisitors, 2 AllMyLinks, and 3 AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the AMVconfigcfgserverpath parameter...

CVE-2004-0267

The 1 inoregupdate, 2 uniftest, or 3 unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0316

Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service crash via 1 a large GET request to port 1080 or 2 a large GET request of % characters to port 8080...

CVE-2004-0245

Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service crash by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero...

CVE-2004-0313

Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long 1 GET argument or 2 method name...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

CVE-2004-0303

OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in 1 the file parameter in /glossaries/index.php, 2 the filename parameter in /readings/index.php, or 3 the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd...