EUVD-2004-2702

Malware in sbrugna...

EUVD-2004-2697

Malware in sbrugna...

EUVD-2004-2701

Malware in sbrugna...

EUVD-2004-2696

Malware in sbrugna...

EUVD-2004-2700

Malware in sbrugna...

CVE-2004-2709

Buffer overflow in the striphtmltags method for Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags...

CVE-2004-2712

Buffer overflow in Gyach Enhanced Gyach-E before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service crash via unspecified vectors related to "URL data."...

CVE-2004-2711

Multiple buffer overflows in Gyach Enhanced Gyach-E before 1.0.2 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to "avatar retrieval."...

CVE-2004-2708

Gyach Enhanced Gyach-E before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file...

CVE-2004-2706

Unspecified vulnerability in Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service crash via conference packets with error messages...

CVE-2004-2709

The vulnerability CVE-2004-2709 affects Gyach Enhanced (Gyach-E) before 1.0.4, where a buffer overflow in the strip_html_tags method can be triggered remotely via HTML tags, potentially causing a denial of service or arbitrary code execution. Exploitation vectors are not detailed in the provided ...

CVE-2004-2708

Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext in its configuration file, enabling an attacker with access to the file to obtain user passwords. This vulnerability is associated with CVE-2004-2708 and is corroborated by multiple sources in the connected documents (Red Hat, CV...

CVE-2004-2706

The vulnerability CVE-2004-2706 affects Gyach Enhanced (Gyach-E) before 1.0.4. An remote attacker can trigger a denial of service (crash) by sending conference packets containing error messages. Mitigation: upgrade Gyach-E to version 1.0.4 or later, per referenced entries. The connected documents...

CVE-2004-2706

Unspecified vulnerability in Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service crash via conference packets with error messages...

CVE-2004-2710

CVE-2004-2710 affects Gyach Enhanced (Gyach-E) prior to 1.0.3. Multiple buffer overflows allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary code via two vectors: (1) sending certain typing statuses, and (2) setting the chat room status bar to the current c...

CVE-2004-2711

CVE-2004-2711 affects Gyach Enhanced (Gyach-E) prior to 1.0.2. The issue is described as multiple buffer overflows in avatar retrieval logic that can allow a remote attacker to crash the application or potentially execute arbitrary code. The connected sources confirm the affected product/version ...

CVE-2004-2712

Gyach Enhanced (Gyach-E) prior to version 1.0.0-SneakPeek-3 is affected by a buffer overflow vulnerability that could be triggered by URL data, allowing remote attackers to cause a denial of service (crash). The description specifies an unspecified vector but identifies the affected product and v...

CVE-2004-2708: Undefined Security Weakness

Gyach Enhanced Gyach-E before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file...

CVE-2004-2707: Undefined Security Weakness

Multiple unspecified vulnerabilities in Gyach Enhanced Gyach-E before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses...

CVE-2004-2709: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the striphtmltags method for Gyach Enhanced Gyach-E before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags...