Skip to content
OpenAdvisories

Archive

3 June 2004

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 332
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 813
  9. 9 
  10. 105
  11. 1110
  12. 12 
  13. 13 
  14. 14 
  15. 154
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 2317
  24. 244
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 3031

32 results · Feed

  • Unscored —

    Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different…

  • Unscored —

    Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."

  • Unscored —

    Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2004-0501 Public exploit EPSS 19%

    Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a r…

  • Unscored —
    CVE-2004-0523 EPSS 12%

    Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers…

  • Unscored —

    Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2004-0228 Public exploit

    Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain p…

  • Unscored —

    The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unkno…

  • Unscored —

    SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statem…

  • Unscored —
    CVE-2004-0490 Public exploit

    cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path opti…

  • Unscored —

    Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unk…

  • Unscored —
    CVE-2004-0503 EPSS 11%

    Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media …

  • Unscored —
    CVE-2004-0519 Public exploit Scanner template EPSS 23%

    Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary s…

  • Medium —

    Mailman Sensitive Information Disclosure

    Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.

  • Unscored —

    Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when trac…

  • Unscored —

    cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while r…

  • Unscored —

    XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attacke…

  • Unscored —
    CVE-2004-0502 Public exploit EPSS 20%

    Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an im…

  • Unscored —

    Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not prope…

  • Unscored —

    Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrar…

  • Unscored —

    Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip se…

  • Unscored —

    Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."

  • Unscored —

    The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown at…

  • Unscored —
    CVE-2004-0520 Public exploit

    Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert ar…

  • Unscored —

    A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resou…

  • Unscored —

    Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE…

  • Unscored —

    msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attac…

  • Unscored —

    votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting pa…

  • Unscored —

    describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups ar…

  • Unscored —

    SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with e…

  • Unscored —

    editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privi…

  • Unscored —

    SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated user…