CVE-2004-0412

Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server...

CVE-2004-0769

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771...

libNSS Hello Challenge Remote Heap Overflow

Binary data 2133.prm...

ISC BIND < 4.9.7 Inverse-Query Remote Overflow (deprecated)

Binary data 1007.prm...

Sendmail < 8.10.0 mail.local Newline Handling Remote DoS

Binary data 2015.prm...

Winamp < 5.05 .WSZ File Handling RCE

Binary data 2151.prm...

iTunes < 8.2 Remote Overflow

Binary data 5041.prm...

Sendmail < 8.6.10 IDENT Remote Overflow

Binary data 2019.prm...

libNSS Hello Challenge Remote Heap Overflow

Binary data 2134.prm...

CVE-2004-0418

servenotify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data...

osTicket open.php Support Address Crafted Mail Loop Remote DoS

The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. If so, a remote attacker can generate a mail loop on the target by opening a ticket with the...

CVE-2004-0704

Unknown vulnerability in 1 duplicates.cgi and 2 buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products...

SUSE-SA:2003:035: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2003:035 sendmail. The well known and widely used MTA sendmail is vulnerable to a remote denial-of-service attack in version 8.12.8 and earlier but not before 8.12. The bug exists in the DNS map code. This feature is enabled by...

CVE-2004-0704

Unknown vulnerability in 1 duplicates.cgi and 2 buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products...

[SECURITY] [DSA 530-1] New l2tpd packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 530-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 17th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] Advisory 11/2004: PHP memory_limit remote vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e-matters GmbH www.e-matters.de -= Security Advisory =- Advisory: PHP memorylimit remote vulnerability Release Date: 2004/07/14 Last Modified: 2004/07/14 Author: Stefan Esser [email protected] Application: PHP = 4.3.7 PHP5 = 5.0.0RC3 Severity: A...

Xine-Lib 0.99 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/10890/info It is reported that the xine media library is affected by a remote buffer overflow vulnerability. This issue can allow a remote attacker to gain unauthorized access to a vulnerable computer. xine-lib rc-5 and prior versions are reportedly...

CVE-2004-0399

Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the senderverify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification...

YaPiG 0.92 - Remote Server-Side Script Execution

source: https://www.securityfocus.com/bid/10891/info A vulnerability is reported to exist in YaPiG that may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue exists due to a lack if sanitization of user-supplied data. It is reported that an attacker may be ab...

RHEL 2.1 : fetchmail (RHSA-2002:294)

Updated Fetchmail packages are available for Red Hat Linux Advanced Server which close a remotely-exploitable vulnerability in unpatched versions of Fetchmail prior to 6.2.0. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation Fetchmail is a remote mail retrieval and forwarding...