6866 matches found
CVE-2004-0058
The CVE-2004-0058 entry affects Antivir for Linux 2.0.9-9 and potentially earlier versions. It describes a local privilege issue where a symlink race on the temporary file .pid_antivir_$$ allows a local user to overwrite arbitrary files. The underlying cause is a symlink attack on a daemon-relate...
CVE-2004-0067
Multiple cross-site scripting XSS vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via 1 descendancy.php, 2 index.php, 3 individual.php, 4 login.php, 5 relationship.php, 6 source.php, 7 imageview.php, 8 calendar.php, 9 gedrecord.php, 10...
PhpDig config.php relative_script_path Parameter Remote File Inclusion
The remote host is running phpdig, an http search engine written in PHP. There is a flaw in this product that could allow an attacker to execute arbitrary PHP code on this by forcing this set of CGI to include a PHP script hosted on a third-party host. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-0042
CVE-2004-0042 concerns vsftpd 1.1.3, where the login error messages differ based on whether a supplied username exists. The underlying effect is information disclosure: remote attackers can determine valid usernames on the server. The available connected sources corroborate the version (vsftpd 1....
CVE-2004-0046
The CVE-2004-0046 entry describes an XSS vulnerability in SnapStream PVS LITE. The issue allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' character. Affected component: SnapStream PVS LITE web interface; root cause: improper handling of...
CVE-2004-0043
CVE-2004-0043 relates to a buffer overflow in Yahoo Messenger before and including version 5.6.0.1351, triggered by a long filename in the download feature. The vulnerability can cause a denial of service and, potentially, remote code execution. Affected software is Yahoo Instant Messenger, with ...
CVE-2004-0042
vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
CVE-2004-0029
CVE-2004-0029 affects Lotus Notes Domino 6.0.2 on Linux, where the notes.ini configuration file is installed with world-writable permissions. This enables local users to modify the Notes configuration and potentially gain privileges. The core vulnerability is the insecure file permissions of note...
CVE-2004-0034
Multiple cross-site scripting XSS vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via 1 the phorumcheckxss function in common.php, 2 the EditError variable in profile.php, and 3 the Error variable in login.php...
CVE-2004-0014
Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...
CVE-2004-0014
Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings...
CVE-2004-0034
CVE-2004-0034 affects Phorum 3.4.5 and earlier with multiple XSS vulnerabilities. The issues allow remote attackers to inject arbitrary HTML or web script through (1) phorum_check_xss in common.php, (2) EditError in profile.php, and (3) Error in login.php. The NVD metric reports a CVSS v2 base sc...
CVE-2004-0037
The CVE-2004-0037 record concerns FirstClass Desktop Client 7.1. The vulnerability arises from hyperlinks embedded in FirstClass RTF messages, which allow a remote attacker to execute arbitrary commands on the affected client. Documented impact indicates arbitrary command execution with network a...
CVE-2004-0030
PHP remote file inclusion vulnerability in 1 functions.php, 2 authenticationindex.php, and 3 configgedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGVBASEDIRECTORY parameter to reference a URL on a remote web server that contains the code...
CVE-2004-0014
CVE-2004-0014 affects the nd WebDAV interface (nd 0.8.2 and earlier). The root cause is multiple buffer overflows triggered by long strings received from a remote WebDAV server, which could allow a remote attacker to execute arbitrary code. Public advisories reference the Debian security advisory...