Archive
January 2004
Vulnerabilities first published in this month (UTC), newest first.
68 results · Feed
-
Unscored —
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of …
-
Unscored —
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a differe…
-
Unscored —
Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerabi…
-
Unscored —
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a de…
-
Unscored —
The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerab…
-
Unscored —
Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.
-
Unscored —
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier,…
-
Unscored —
Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vu…
-
Unscored —
Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow loc…
-
Unscored —CVE-2003-1032 Public exploit
Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the colu…
-
Unscored —
NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in register.php for unknown …
-
Unscored —CVE-2004-0074 Public exploit
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, …
-
Unscored —
The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain c…
-
Unscored —CVE-2003-1031 Public exploit
Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arb…
-
Unscored —
Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers t…
-
Unscored —CVE-2004-0072 Public exploit
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via en…
-
Unscored —
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink a…
-
Unscored —
The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denia…
-
Unscored —
Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers …
-
Unscored —CVE-2004-0071 Public exploit
Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remot…
-
Unscored —
WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST reque…
-
Unscored —
Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1…
-
Unscored —
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote atta…
-
Unscored —CVE-2004-0069 Public exploit
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2004-0067 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2004-0073 Public exploit
PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remot…
-
Unscored —
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM)…
-
Unscored —
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters t…
-
Unscored —
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with …
-
Unscored —CVE-2004-0064 Public exploit
The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symli…
-
Unscored —
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to st…
-
Unscored —CVE-2003-0819 EPSS 41%
Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers…
-
Unscored —
tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a…
-
Unscored —CVE-2003-1029 Public exploit
The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite lo…
-
Unscored —
Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a lon…
-
Unscored —
The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, whi…
-
Unscored —CVE-2004-0046 Public exploit
Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script …
-
Unscored —
Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service …