6866 matches found
CVE-2004-0060
CVE-2004-0060 affects WWW File Share Pro 2.42 and earlier. The vulnerability allows a remote attacker to trigger a denial-of-service (crash) via a large POST request sent over the network. The connected documents confirm the affected product and the impact (DoS via crafted POST size), but do not ...
CVE-2004-0069
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function...
CVE-2004-0066
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to 1 indilist.php, 2 famlist.php, 3 placelist.php, 4 imageview.php, 5 timeline.php, 6 clippings.php, 7 login.php, and 8 gdbi.php...
CVE-2004-0054
CVE-2004-0054 affects Cisco IOS with H.323 support (releases 11.3T through 12.2T). The issue is in the H.323 message processing that can be exploited to cause a denial of service and, potentially, remote code execution as demonstrated by the NISCC/OUSPG PROTOS test suite for H.225. Multiple sourc...
CVE-2004-0064
The CVE-2004-0064 entry describes a local vulnerability in SuSEconfig.gnome-filesystem (YaST) on SuSE 9.0 where local users can overwrite arbitrary files via a symlink attack inside the temporary directory tmp.SuSEconfig.gnome-filesystem.$RANDOM. The attacker’s ability to create or replace files ...
CVE-2004-0057
CVE-2004-0057 concerns tcpdump
CVE-2004-0058
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pidantivir$$ temporary file...
CVE-2004-0061
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via 1 a URL with a trailing . dot, or 2 a URI with a leading slash or backslash character...
CVE-2004-0054
Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...
CVE-2004-0062
The CVE-2004-0062 entry concerns FishCart prior to 3.1, where an integer overflow in the rnd arithmetic rounding function can be triggered by an order with a large quantity, enabling remote attackers to cause negative totals. Affected software: FishCart (versions before 3.1). Root cause: integer ...
CVE-2004-0055
The printattrstring function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via a RADIUS attribute with a large length value...
CVE-2004-0055
The printattrstring function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via a RADIUS attribute with a large length value...
CVE-2004-0069
HD Soft Windows FTP Server 1.6 and earlier is affected by CVE-2004-0069 due to a format string vulnerability in the username parameter, which is processed by wscanf. This allows remote attackers to induce arbitrary code execution on vulnerable installations. The vulnerability is described in the ...
CVE-2004-0064
The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory...
CVE-2004-0060
WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service crash via a large POST request...
CVE-2004-0062
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity...
CVE-2004-0055
CVE-2004-0055 affects tcpdump v3.8.1 and earlier, where the print_attr_string function in the RADIUS decoding routines can be triggered by a large-length RADIUS attribute. The vulnerability allows remote attackers to cause a denial of service (segmentation fault) via crafted packets. Multiple ven...
CVE-2004-0073
CVE-2004-0073 affects EasyDynamicPages 2.0 via a PHP remote file inclusion in the edp_relative_path parameter of config.php and config_page.php. An attacker can reference a URL on a remote server containing a malicious serverdata.php to cause the web server to execute arbitrary PHP code. The vuln...
CVE-2004-0061
CVE-2004-0061 affects WWW File Share Pro 2.42 and earlier . It allows remote attackers to bypass directory access restrictions by using a URL with a trailing dot or a URI beginning with a slash or backslash. The impact described is partial disclosure/integrity/availability with a network attack v...