CVE-2004-0079

The connected documents confirm CVE-2004-0079: in OpenSSL 0.9.6c–0.9.6k and 0.9.7a–0.9.7c, a crafted SSL/TLS handshake can trigger a null dereference in do_change_cipher_spec, causing a denial of service (crash). Remediation is to apply patched/OpenSSL releases per advisories (e.g., CentOS adviso...

CVE-2004-0081

CVE-2004-0081 affects OpenSSL 0.9.6 prior to 0.9.6d. The issue is that OpenSSL does not properly handle unknown TLS/SSL message types, enabling a remote attacker to trigger a denial of service via an infinite loop (demonstrated with the Codenomicon TLS Test Tool). Impact is a network-based DoS; e...

CVE-2004-0112

The CVE-2004-0112 issue affects OpenSSL 0.9.7a/b/c: during the SSL/TLS handshake, the Kerberos ciphersuite path fails to validate the Kerberos ticket length, enabling a remote attacker to cause a denial-of-service by triggering an out-of-bounds read. Public sources in connected documents confirm ...

CVE-2005-1507

CVE-2005-1507: Remote buffer overflow in the Tomcat plugin of 4D WebSTAR Web Server (versions 5.33/5.4) can be triggered by a long URL, potentially causing denial of service and arbitrary code execution. Documented in NVD/OpenVAS entries with base score 5.0; no remediation details provided in the...

CVE-2004-0696

CVE-2004-0696 affects 4D WebSTAR Web Server 5.3.2 and earlier. The ShellExample.cgi script allows remote attackers to list arbitrary directories via a URL containing the desired path and a * (asterisk). NVD lists a base score of 5.0 (Medium) with network access and low attack complexity; no explo...

CVE-2004-0695

CVE-2004-0695 affects 4D WebSTAR WebSTAR FTP Server up to 5.3.2. It is a stack-based buffer overflow in the FTP service that can allow remote code execution via a long FTP command, with specific modules describing a USER/overflow in the logging routine (OSX 5.3.2). Exploitation references include...

CVE-2004-0698

4D WebSTAR (FTP/Server) is affected: versions up to 5.3.2 and earlier contain a local symbolic link vulnerability caused by opening files without properly verifying their existence or absolute location. This design issue can let a local attacker write to arbitrary files with the application’s per...

CVE-2004-0697

CVE-2004-0697 affects 4D WebSTAR 5.3.2 and earlier. The vulnerability permits remote attackers to read the php.ini configuration file, potentially exposing sensitive information. The NVD entry lists a base CVSS v2 score of 5.0 (Medium) with network access and low complexity, but no exploitation d...

CVE-2005-3143

CVE-2005-3143 affects the Mailbox Server for 4D WebStar prior to 5.3.5. It allows denial-of-service (crash) via IMAP clients on Mac OS X Mail 2. The NVD/Nessus entries document the issue; no exploitation details are provided in the connected documents, and no remediation details are stated here.