Archive
1 September 2004
Vulnerabilities first published on this day (UTC), newest first.
480 results · Feed
-
Unscored —
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLab…
-
Unscored —
SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2004-0077 Public exploit
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not pro…
-
Unscored —CVE-2004-0032 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary H…
-
Unscored —
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, …
-
Unscored —
DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.
-
Unscored —
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sen…
-
Unscored —
XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bo…
-
Unscored —
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disa…
-
Unscored —
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote at…
-
Unscored —
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network…
-
Unscored —
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if…
-
Unscored —
Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long passw…
-
Unscored —
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1…
-
Unscored —CVE-2004-0114 Public exploit
The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and …
-
Unscored —
Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long en…
-
Unscored —
Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers t…
-
Unscored —
VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arb…
-
Unscored —
vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows loc…
-
Unscored —
The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace t…
-
Unscored —
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote at…
-
Unscored —CVE-2004-0276 Public exploit
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denia…
-
Unscored —CVE-2004-0186 Public exploit
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting…
-
Unscored —
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) a…
-
Unscored —
Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote atta…
-
Unscored —
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause…
-
Unscored —
The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could ca…
-
Unscored —
Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arb…
-
Unscored —
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to c…
-
Unscored —
jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote atta…
-
Unscored —CVE-2004-0113 EPSS 11%
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of servi…
-
Unscored —
Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.
-
Unscored —
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote a…
-
Unscored —
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 pac…
-
Unscored —CVE-2004-0129 Public exploit
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitra…
-
Unscored —CVE-2004-0128 Public exploit
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows rem…
-
Unscored —
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains…
-
Unscored —
The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signe…
-
Unscored —
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …
-
Unscored —
Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" i…