CVE-2004-0005

Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 octal encoding in yahoodecode that causes a null byte to be written beyond the buffer, 2 octal encoding in yahoodecode that causes a pointer to reference memory...

CVE-2004-0002

CVE-2004-0002 describes a denial-of-service risk in the TCP MSS handling in netinet. Remote attackers can exhaust resources by (1) setting a very small MTU, generating many small packets, or (2) sending numerous packets with tiny payloads that trigger many calls to sowakeup. The available connect...

CVE-2004-0002

The TCP MSS maximum segment size functionality in netinet allows remote attackers to cause a denial of service resource exhaustion via 1 a low MTU, which causes a large number of small packets to be produced, or 2 via a large number of packets with a small TCP payload, which cause a large number ...

CVE-2004-1082

moddigestapple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials...

CVE-2004-0015

vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges...

CVE-2004-0016

The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files...

Serv-U SITE CHMOD Command Multiple Vulnerabilities

The remote host is running Serv-U FTP Server. There is a bug in the way the server handles arguments to the SITE CHMOD requests that could allow an attacker to trigger a buffer overflow or corrupt memory in the server and disable it remotely or to potentially execute arbitrary code on the host...

CVE-2004-0088

CVE-2004-0088 affects Mac OS X (System Configuration subsystem) on 10.2.8, where local users can modify network settings. The description states this is a local-privilege/user-configuration issue distinct from CVE-2004-0087. The connected documents do not provide concrete exploit details, affecte...

CVE-2004-0086

Technical details for CVE-2004-0086 are not publicly provided in the supplied documents. No explicit affected versions, root cause, or impact are stated. Monitor official advisories for updates.

CVE-2004-0088

The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087...

CVE-2004-0092

Technical details for CVE-2004-0092 are not publicly provided in the connected documents; the records only mention an unknown Safari vulnerability on macOS 10.2.8/10.3.2. Monitor for updates.

CVE-2004-0007

CVE-2004-0007 affects instant messaging clients Gaim (GAIM) up to version 0.74 and Ultramagnetic before 0.81. The vulnerability is a buffer overflow in the Extract Info Field Function used by MSN and YMSG protocol handlers, allowing remote attackers to cause a denial of service and potentially ex...

CVE-2004-0006

CVE-2004-0006 affects the IM client components in GAIM (aka Pidgin) 0.75 and earlier and Ultramagnetic before 0.81 . The vulnerability set consists of multiple buffer overflows in the Yahoo-related handling paths: (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login...

CVE-2004-2034

Buffer overflow in the 1 WTHoster and 2 WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename...

CVE-2004-0087

The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088...

CVE-2004-0006

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via 1 cookies in a Yahoo web connection, 2 a long name parameter in the Yahoo login web page, 3 a long value parameter in the...

CVE-2004-0008

Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow...

CVE-2004-0086

Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085...

CVE-2004-0085

Technical details about CVE-2004-0085 are not provided in the connected documents; public info here is limited to generic descriptions. Monitor for updates.

CVE-2004-0008

GAIM (0.74 and earlier) and Ultramagnetic prior to 0.81 are affected by CVE-2004-0008 due to a heap-based overflow triggered by a DirectIM packet, allowing remote attackers to cause a denial of service and potentially execute arbitrary code. The issue is network-exploitable with no authentication...