Skip to content
OpenAdvisories

Archive

February 2004

Vulnerabilities first published in this month (UTC), newest first.

← January 2004 2004 / February March 2004 →
  1. 1 
  2. 2 
  3. 34
  4. 42
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 114
  12. 12 
  13. 13 
  14. 144
  15. 15 
  16. 161
  17. 17 
  18. 18 
  19. 196
  20. 20 
  21. 21 
  22. 22 
  23. 231
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2004-0172

    Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow …

  • Unscored —
    CVE-2004-0097 EPSS 10%

    Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute…

  • Unscored —
    CVE-2004-0164 Public exploit

    KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via…

  • Unscored —
    CVE-2004-0104 Public exploit EPSS 26%

    Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

  • Unscored —
    CVE-2004-0105

    Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

  • Unscored —
    CVE-2004-0010

    Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privi…

  • Unscored —
    CVE-2003-0441

    Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to gain privileges.

  • Unscored —
    CVE-2004-0106

    Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set…

  • Unscored —
    CVE-2004-0132 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2004-0143

    Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via…

  • Unscored —
    CVE-2004-0084 Public exploit EPSS 25%

    Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, …

  • Unscored —
    CVE-2004-0083 Public exploit EPSS 21%

    Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers …

  • Unscored —
    CVE-2004-0103

    crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may…

    crawl Debian
  • Unscored —
    CVE-2004-0039

    Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI …

  • Unscored —
    CVE-2002-1575

    cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters…

  • Unscored —
    CVE-2003-0818 Public exploit EPSS 82%

    Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Micros…

  • Unscored —
    CVE-2004-0127

    Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2004-0130

    login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to…

  • Unscored —
    CVE-2004-0003

    Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits …

  • Unscored —
    CVE-2004-0002

    The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resou…

  • Unscored —
    CVE-2004-0005 EPSS 11%

    Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitra…

  • Unscored —
    CVE-2003-0987

    mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.