Archive
3 June 2004
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —
Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different…
-
Unscored —
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."
-
Unscored —
Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of servi…
-
Unscored —
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a r…
-
Unscored —CVE-2004-0523 EPSS 12%
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers…
-
Unscored —
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2004-0228 Public exploit
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain p…
-
Unscored —
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unkno…
-
Unscored —
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statem…
-
Unscored —CVE-2004-0490 Public exploit
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path opti…
-
Unscored —
Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unk…
-
Unscored —CVE-2004-0503 EPSS 11%
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary s…
-
Medium —
Mailman Sensitive Information Disclosure
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
-
Unscored —
Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when trac…
-
Unscored —
cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while r…
-
Unscored —
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attacke…
-
Unscored —
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an im…
-
Unscored —
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not prope…
-
Unscored —
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrar…
-
Unscored —
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip se…
-
Unscored —
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."
-
Unscored —
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown at…
-
Unscored —CVE-2004-0520 Public exploit
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert ar…
-
Unscored —
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resou…
-
Unscored —
Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE…
-
Unscored —
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attac…
-
Unscored —
votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting pa…
-
Unscored —
describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups ar…
-
Unscored —
SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with e…
-
Unscored —
editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privi…
-
Unscored —
SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated user…