CVE-2004-0056

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager BCM, Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2004-0061

WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...

CVE-2004-0063

The SPPVerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a StatusOK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number...

CVE-2004-0069

Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...

CVE-2004-0072

Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded .. backslash .., "%5c%2e%2e" sequences in an HTTP request...

CVE-2004-0057

The rawprint function in the ISAKMP decoding routines print-isakmp.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than...

CVE-2004-0001

Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges...

CVE-2004-0064

The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory...

CVE-2004-0067

Multiple cross-site scripting XSS vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via 1 descendancy.php, 2 index.php, 3 individual.php, 4 login.php, 5 relationship.php, 6 source.php, 7 imageview.php, 8 calendar.php, 9 gedrecord.php, 10...

CVE-2004-0057

The rawprint function in the ISAKMP decoding routines print-isakmp.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than...

CVE-2004-0106

Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084...

CVE-2004-0106

Technical details not publicly available in the provided documents for CVE-2004-0106 and related CVEs (XFree86 font-file handling vulnerabilities). Monitor for updates; no further specifics in the supplied material.

CVE-2004-1180

Unknown vulnerability in the rwho daemon rwhod before 0.17, on little endian architectures, allows remote attackers to cause a denial of service application crash...

CVE-2004-0132

CVE-2004-0132 affects ezContents 2.0.2 and earlier and is a PHP remote file inclusion vulnerability. Exploitation via remote PHP inclusion occurs through GLOBALS[rootdp] in db.php or GLOBALS[language_home] in archivednews.php with a malicious lang_admin.php, allowing an attacker to execute arbitr...

CVE-2004-0083

Technical details for CVE-2004-0083 are not publicly available in the provided documents; monitor for updates.

CVE-2004-0084

Technical details for CVE-2004-0084 are not publicly available in the provided documents. Monitor for updates from the advisories and vendors.

CVE-2004-0084

Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias font.alias file, a different vulnerability than CVE-2004-0083 and...

CVE-2004-2082

The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service pmsystem.exe crash via a GET request wit a large number of leading "/" slash characters...

CVE-2004-2088

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...

CVE-2004-0103

The CVE-2004-0103 issue affects the crawl game (Debian packaging context indicated by DSA-432). Vulnerable component: environment-variable handling leading to a missing size check when copying into a fixed-size buffer, enabling local privilege escalation. Affected: crawl before 4.0.0 beta23. Impa...