CVE-2004-0935

CVE-2004-0935 affects Eset Anti-Virus prior to 1.020. A ZIP archive with both local and global headers set to zero could bypass antivirus protection and allow a malicious file to be opened on the target system. PoC/proofs of concept code and advisories (e.g., iDEFENSE CAN references) document det...

CVE-2004-0902

The CVE-2004-0902 entry refers to multiple heap-based buffer overflows in Mozilla Firefox and Mozilla suite components (Firefox before the Preview Release, Mozilla before 1.7.3, Thunderbird before 0.8). The issues allow remote attackers to cause an application crash (DoS) or execute arbitrary cod...

CVE-2005-1767

CVE-2005-1767 affects Linux kernels 2.4.x and 2.6.x; the vulnerability exists in traps.c stack fault handler, allowing a local user to cause a kernel crash (Denial of Service) via stack exceptions. Public advisories (Debian, Red Hat/CentOS, Ubuntu) indicate updated kernel packages mitigate the is...

CVE-2005-0384

CVE-2005-0384 : Unknown vulnerability in the Linux kernel 2.6.8.1 PPP driver that allows a remote attacker using a pppd client to cause a kernel crash (denial of service). Public references include Red Hat advisories and Debian/Ubuntu advisories; no specific fix version is provided in the supplie...

CVE-2004-0903

CVE-2004-0903 describes a stack-based buffer overflow in the writeGroup function of nsVCardObj.cpp, affecting Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8. An attacker could remotely execute arbitrary code by processing malformed VCard attachments d...

CVE-2004-1184

CVE-2004-1184 affects enscript (notably version 1.6.3) where EPSF pipe support accepts shell metacharacters, enabling arbitrary command execution by remote attackers or local users. Technical details across OpenVAS/Nessus entries confirm the vulnerability and its association with enscript; remedi...

CVE-2000-1134

CVE-2000-1134 concerns multiple shells (tcsh, csh, sh, bash) that follow symlinks when processing here-documents (<

CVE-2001-0834

CVE-2001-0834 affects the htsearch CGI in ht://Dig (htdig)

CVE-2005-1043

CVE-2005-1043 affects PHP before 4.3.11 via exif.c. An EXIF header with a large IFD nesting level triggers significant stack recursion, leading to memory exhaustion and a crash (DoS). Affected component: PHP exif handling; vulnerability type: unchecked recursion/stack depth in EXIF parsing. Remed...

CVE-1999-0405

The CVE-1999-0405 entry concerns a buffer overflow in the lsof utility that allows local users to obtain root privileges. The connected documents corroborate the issue as a buffer overflow in lsof, with references from Red Hat and CVE listings. No detailed vendor/version information, exploit scen...

CVE-2004-0461

ISC DHCPD 3.0.1rc12/rc13 contains two buffer overflow risks: when vsnprintf support is absent, header files map vsnprintf to the unsafe vsprintf, enabling possible DoS (server crash) and potentially arbitrary code execution. The issue affects the DHCP server component in ISC DHCP 3.0.1rc12/rc13 a...

CVE-2004-0936

CVE-2004-0936 refers to a ZIP header manipulation vulnerability affecting anti-virus engines (notably RAV) where both local and global ZIP headers can be set to zero, allowing a compressed file to bypass protection and still be opened. The connected sources describe a proof-of-concept and public ...

CVE-2004-0956

CVE-2004-0956 affects MySQL prior to 4.0.20. A remote attacker can cause an application crash/DoS via a MATCH AGAINST query with an opening double quote but no closing quote. Exploitation details are not provided in the documents; multiple advisories (e.g., SUSE, Ubuntu, FreeBSD/OpenVAS entries) ...

CVE-2004-1237

CVE-2004-1237 : A vulnerability in the system call filtering code of the Red Hat Enterprise Linux 3 audit subsystem could allow a local user to cause a denial of service (system crash) when auditing is enabled. The issue is addressed in the Red Hat kernel security advisory RHSA-2005:043, which up...

CVE-2004-1071

The CVE-2004-1071 issue affects the Linux kernel’s binfmt_elf loader (binfmt_elf.c) in kernels 2.4.x up to 2.4.27 and 2.6.x up to 2.6.8. A failed mmap is not handled correctly, leading to an incorrectly mapped image and potential local code execution by unauthorized users. The connected SUSE advi...

CVE-2005-0373

CVE-2005-0373 describes a buffer overflow in Cyrus-SASL’s DIGEST-MD5 implementation (digestmd5.c, CVS release 1.170, also referred to as digestmda5.c) that was not part of official releases. The flaw allows remote attackers to execute arbitrary code by triggering the overflow in the Digest-MMD5 S...

CVE-2004-0937

CVE-2004-0937 affects Sophos Anti-Virus prior to 3.87.0 and Sophos Anti-Virus for Windows 95/98/Me prior to 3.88.0. The issue allows remote attackers to bypass antivirus protection by delivering a ZIP archive whose local and global headers are set to zero, yet the archive can still be opened on t...

CVE-2004-0947

CVE-2004-0947 is confirmed across connected docs as a vulnerability in the unarj utility. The issue is a buffer overflow when handling long filenames in arj archives, enabling remote code execution. Related advisories additionally describe a directory-traversal weakness in the -x extract option t...

CVE-2004-1005

CVE-2004-1005 refers to multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier. The initial description notes remote attackers could trigger these issues with unknown impact, and connected advisories (e.g., Debian DSA 639-1, Gentoo GLSA 200502-24, SuSE OpenVAS entries) indicate t...

CVE-2004-1176

CVE-2004-1176 : A buffer underflow in extfs.c of Midnight Commander (mc) prior to 4.5.56 allows remote attackers to cause a denial of service and possibly execute arbitrary code. Documents consistently describe the issue as a remote vulnerability affecting mc with the buffer underflow in the extf...

CVE-2006-0043

CVE-2006-0043 concerns a buffer overflow in the nfs-user-server path handling that Debian advisories (DSA-975-1) describe as remote and capable of arbitrary code execution via symlinks. Debian notes vulnerable packages in older releases (woody/sarge lineage) and provides fixes in the 2.2beta47- p...

CVE-2010-0230

Summary: CVE-2010-0230 concerns postfix misconfigurations in SUSE Linux Enterprise 10 SP3 and openSUSE 11.2 that allow SMTP listening on all network interfaces, potentially bypassing access restrictions. Affected components/products (from provided documents): postfix in SLE10-SP3 and openSUSE 11....

CVE-1999-0234

The CVE-1999-0234 issue involves Bash treating any byte with value 0xFF as a command separator, per the CVE record and related entries (Red Hat, CVE list, EUVD, PT-1996-1035). These connected documents confirm the underlying root cause (parsing of 0xFF) but do not specify exact affected Bash vers...

CVE-2004-0866

CVE-2004-0866 involves Internet Explorer 6.0. The vulnerability allows websites to set cookies for country‑specific top‑level domains (e.g., .ltd.uk, .plc.uk, .sch.uk), which could enable a remote attacker to perform a session fixation attack and hijack a user’s HTTP session. The provided documen...

CVE-2004-0932

The CVE-2004-0932 issue affects McAfee Anti-Virus Engine DATS drivers before 4398 (and the DATS Driver before 4397). A crafted ZIP archive with both local and global headers set to zero can bypass antivirus protection and still be opened on the target system. This is a remote-exploitation-style b...

CVE-2007-0460

CVE-2007-0460 affects the ulogd daemon. Multiple buffer overflows related to improper string length calculations have been reported for SUSE Linux 9.3–10.1 and possibly other distros. Public sources indicate an impact ranging from daemon crashes to remote code execution (as described in Gentoo GL...

CVE-1999-0390

CVE-1999-0390 describes a buffer overflow in the Dosemu Slang library for Linux. The set of connected records attributes a local, low-complexity vulnerability with no authentication requirement, potentially impacting confidentiality, integrity, and availability (per NVD metrics). The available do...

CVE-1999-0433

XFree86 startx is affected by a symlink attack allowing local users to create files in restricted directories, potentially gaining privileges or causing a denial of service. The provided documents do not specify affected versions or a fix; one PT Security entry notes no information about a newer ...

CVE-2001-0763

CVE-2001-0763 affects Linux xinetd up to version 2.1.8.9pre11-1 and earlier. The issue is a buffer overflow in the ident handling path: a long ident response is not properly processed by the svc_logprint function, enabling a remote attacker to potentially execute arbitrary code. Debian’s DSA-063-...

CVE-2002-0004

CVE-2002-0004 describes a heap corruption vulnerability in the “at” utility caused by a double-free during execution time handling, enabling a local user to potentially execute arbitrary code. The issue is evidenced in multiple advisories (e.g., Debian DSA 102-1/102-2) noting that the remote host...

CVE-2004-0688

The OpenMotif-related entries include CVE-2004-0687 and CVE-2004-0688, with multiple OpenMotif packages (e.g., openmotif, openmotif-libs, openmotif-devel) listed in several advisories. Ubuntu/USN-27-1 and Red Hat/SUSE advisories reference these CVEs alongside broader OpenMotif fixes, indicating t...

CVE-2004-0887

CVE-2004-0887 affects SUSE Linux Enterprise Server 9 on the S/390 platform, where the SACF privileged instruction is not handled correctly, allowing a local user to gain root privileges. Connected sources also reference Debian advisories for kernel-source-2.4.27 updates (DSA-1018-1/2) that addres...

CVE-2004-0933

CVE-2004-0933 affects Computer Associates CA InoculateIT 6.0, eTrust Antivirus (r6.0–r7.1), eTrust Antivirus for the Gateway (r7.0–r7.1), eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor (2.0–2.4), and EZ-Antivirus (6.1–6.3). The issue is a ZIP header handling flaw that lets re...

CVE-2004-1004

CVE-2004-1004 affects Midnight Commander (mc) up to version 4.5.55 with multiple format string vulnerabilities. The provided connected advisories confirm that various distros release patches (e.g., SUSE SLES9 patch 5011441, Gentoo GLSA 200502-24, Debian DSA 639-1) to fix these issues. The CVE ent...

CVE-2004-1170

CVE-2004-1170 affects a2ps 4.13, where remote attackers could cause arbitrary command execution by supplying shell metacharacters in a filename. The vulnerability stems from insecure handling of filenames, enabling code execution with the privileges of the invoking user. Several connected advisor...

CVE-2005-3146

CVE-2005-3146 affects the backup utility StoreBackup. The issue arises from how StoreBackup creates temporary files, enabling a local attacker to perform unauthorized operations on arbitrary files via a symlink attack. Multiple connected sources (e.g., Debian DSA-1022-1, SUSE/Security notes, OSV ...

CVE-2000-0800

CVE-2000-0800 describes a remote code execution possibility caused by a string parsing/format string vulnerability in rpc.kstatd (part of linuxnfs/knfsd) on SuSE and potentially other Linux systems, allowing remote attackers to gain root privileges. Anticipated impact is root compromise via the r...

CVE-2000-1095

CVE-2000-1095 affects modprobe in the modutils 2.3.x package. The vulnerability arises because modprobe uses popen() to invoke the echo program with user-supplied input, allowing unescaped shell metacharacters to be processed via /bin/sh when run through kmod-triggered paths. This can enable a lo...

CVE-2005-1761

CVE-2005-1761 affects the Linux kernel 2.6 and 2.4 on IA-64. The issue allows local users to crash the kernel (denial of service) via the ptrace mechanism and the restore_sigcontext function. The vulnerability is a local privilege/impact scenario with a kernel crash, as indicated by the CVE mappi...

CVE-2005-1763

CVE-2005-1763 describes a buffer overflow in the ptrace system call for 64-bit Linux kernels, enabling local users to write into kernel memory. The issue affects 64-bit architectures and is reported in multiple advisories. Public details confirm a local-exploit scenario with kernel memory impact ...

CVE-2005-3147

CVE-2005-3147 affects the storebackup utility. The backup root directory is created with world-readable permissions, enabling local users to access sensitive data. Debian's DSA-1022-1 confirms fixes in storebackup versions 1.18.4-2sarge1 (stable) and 1.19-2 (sid); OpenVAS and SUSE entries corrobo...

CVE-2017-3224

The CVE-2017-3224 entry concerns Quagga-based OSPF implementations. Affected component: OSPF LSAs with MaxSequenceNumber where recency is determined by sequence number, then checksum, then MaxAge. If two LSAs share the same sequence number, the LSA with the larger checksum is deemed more recent a...

CVE-1999-0409

CVE-1999-0409 affects the GNUplot component used in Linux systems up to version 3.5, where a buffer overflow in gnuplot can allow a local user to gain root privileges. The connected Red Hat and CVE listings corroborate the same description: a local-privilege escalation via a buffer overflow in gn...

CVE-1999-0906

The CVE-1999-0906 entry describes a local buffer overflow in sccw that allows escalation to root via the HOME environment variable. The connected KITPLOIT reference mentions an attack example and lists CVE-1999-0906, but none of the provided documents specify the affected product/vendor/version, ...

CVE-2004-0905

CVE-2004-0905 affects Mozilla Firefox (before the Preview Release), Mozilla (before 1.7.3), and Thunderbird (before 0.8). The issue enables remote attackers to perform cross-domain scripting and potentially execute arbitrary code by convincing a user to drag and drop javascript: links to a frame ...

CVE-2004-1145

CVE-2004-1145 affects Konqueror/KDE up to version 3.3.1 where the Java sandbox could be bypassed by JavaScript or Java applets, allowing read/write of arbitrary files. The issue resides in the sandbox restrictions for Java in Konqueror and the FTP kioslave handling in KDE, enabling remote code ex...

CVE-2001-0458

CVE-2001-0458 : Multiple buffer overflows in ePerl prior to 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. Mandrake and Debian advisories note upgrades to 2.2.14-0.7 (or later) fix the issue; other references corroborate the vulnerability in ePerl.

CVE-2005-4790

Concrete details from connected docs show CVE-2005-4790 is linked to Tomboy and GNOME Tomboy: the LD_LIBRARY_PATH is polluted with a zero-length directory name, causing the current working directory to be searched for libraries and enabling local privilege escalation. The issue is tied to an inco...

CVE-1999-0768

CVE-1999-0768 is a confirmed issue affecting Red Hat systems using Vixie Cron, where a buffer overflow can be triggered via the MAILTO environment variable. The connected Red Hat advisory reiterates the same description and confirms the vulnerability exists in Vixie Cron on Red Hat platforms. The...

CVE-2000-0868

The CVE-2000-0868 issue affects Apache 1.3.12 on SuSE Linux 6.4 where the default configuration exposes CGI script source code. The vulnerability arises because /cgi-bin/ requests can be rewritten to /cgi-bin-sdb/, which is an Alias of /cgi-bin, enabling remote attackers to disclose source code o...