Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device n…
-
Unscored —
telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause …
-
Unscored —CVE-2004-0832 EPSS 10%
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enable…
-
Unscored —
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before exec…
-
Unscored —
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote at…
-
Unscored —
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8…
-
Unscored —
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers…
-
Unscored —
Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXIm…
-
Unscored —
QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of s…
-
Unscored —
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbit…
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specia…
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that reference…
-
Unscored —
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbir…
-
Unscored —
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform un…
-
Unscored —
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and …
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release…
-
Unscored —
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incor…
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an …
-
Unscored —
The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow lo…
-
Unscored —
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a…
-
Unscored —
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascrip…
-
Unscored —
The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Micr…
-
Unscored —CVE-2004-0902 EPSS 10%
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbi…
-
Unscored —CVE-2004-0867 EPSS 17%
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk,…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, …
-
Unscored —
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" …
-
Unscored —
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to…
-
Unscored —
Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow …
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CU…
-
Unscored —
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allo…
-
Unscored —
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to …
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…
-
Unscored —
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME…