Archive
April 2004
Vulnerabilities first published in this month (UTC), newest first.
61 results · Feed
-
Unscored —
McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary comm…
-
Unscored —CVE-2004-0424 Public exploit
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows loc…
-
Unscored —
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows…
-
Unscored —
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count cou…
-
Unscored —CVE-2004-0420 EPSS 46%
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2…
-
Unscored —
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in …
-
Unscored —
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack…
-
Unscored —
CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client reque…
-
Unscored —
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via ma…
-
Unscored —
Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty s…
-
Unscored —
The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for th…
-
Unscored —
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which all…
-
Unscored —
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for th…
-
Unscored —
Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relay…
-
Unscored —CVE-2004-0409 Public exploit
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows r…
-
Unscored —
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows l…
-
Unscored —CVE-2004-0197 EPSS 26%
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-…
-
Unscored —
Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet …
-
Unscored —
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) C…
-
Unscored —
The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an info…
-
Unscored —CVE-2004-0118 EPSS 22%
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate…
-
Unscored —
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows …
-
Unscored —
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and Rea…
-
Unscored —
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with p…
-
Unscored —
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff fi…
-
Unscored —CVE-2004-0116 EPSS 38%
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allo…
-
Unscored —
Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a ha…
-
Unscored —CVE-2004-0123 EPSS 30%
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server …
-
Unscored —CVE-2004-0117 EPSS 27%
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server …
-
Unscored —CVE-2004-0124 EPSS 22%
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network…
-
Unscored —CVE-2004-0385 EPSS 16%
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 all…
-
Unscored —CVE-2004-0119 EPSS 40%
The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows r…
-
Unscored —
The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not …
-
Unscored —
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not ver…
-
Unscored —
Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a…
-
Unscored —
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority…
-
Unscored —CVE-2003-0906 EPSS 25%
Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microso…
-
Unscored —
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Wi…
-
Unscored —CVE-2003-0806 EPSS 33%
Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP …