Archive
August 2004
Vulnerabilities first published in this month (UTC), newest first.
57 results · Feed
-
Unscored —
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to…
-
Unscored —
Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format …
-
Unscored —
The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application c…
-
Unscored —
The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application c…
-
Unscored —
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers…
-
Unscored —
SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed mes…
-
Unscored —CVE-2004-0795 Public exploit
DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allo…
-
Unscored —
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arb…
-
Unscored —CVE-2003-1051 Public exploit
Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary cod…
-
Unscored —CVE-2003-1052 Public exploit
IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setui…
-
Unscored —CVE-2003-1050 Public exploit
Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long co…
-
Unscored —
IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which al…
-
Unscored —
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to exec…
-
Unscored —
Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary c…
-
Unscored —
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permis…
-
Unscored —
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when …
-
High 7.5
mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which…
-
Unscored —
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows lo…
-
Unscored —
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers …
-
Unscored —
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow loc…
-
Unscored —
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is d…
-
Unscored —
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versi…
-
Unscored —
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote att…
-
Unscored —
Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers t…
-
Unscored —
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary fi…
-
Unscored —
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote at…
-
Unscored —
Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malforme…
-
Unscored —
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote att…
-
Unscored —
Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows rem…
-
Unscored —
ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which cou…
-
Unscored —
Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly oth…
-
Unscored —
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions includin…
-
Unscored —
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for…
-
Unscored —
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5…
-
Unscored —
Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method U…
-
Unscored —CVE-2004-0203 EPSS 21%
Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote att…
-
Unscored —
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory …
-
Unscored —
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) p…
-
Unscored —
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute …
-
Unscored —
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a lon…