Archive
1 September 2004
Vulnerabilities first published on this day (UTC), newest first.
480 results · Feed
-
Unscored —
The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify t…
-
Unscored —
Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," a…
-
Unscored —
The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Intern…
-
Unscored —CVE-2003-0122 EPSS 10%
Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to…
-
Unscored —
Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to ex…
-
Unscored —
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
-
Unscored —
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers wit…
-
Unscored —
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) vi…
-
Unscored —
The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence an…
-
Unscored —
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are…
-
Unscored —CVE-2003-0004 Public exploit
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code…
-
Unscored —
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink…
-
Unscored —
Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a d…
-
Unscored —
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large num…
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …
-
Unscored —
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execu…
-
Unscored —CVE-2003-0019 Public exploit
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and Qui…
-
Unscored —
Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long pa…
-
Unscored —
The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and th…
-
Unscored —CVE-2003-0124 Public exploit
man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes …
-
Unscored —
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to exec…
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …
-
Unscored —CVE-2003-0016 EPSS 18%
Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a…
-
Unscored —
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security cer…
-
Unscored —
Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote att…
-
Unscored —
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain …
-
Unscored —CVE-2003-0993 EPSS 11%
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny ru…
-
Unscored —
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attacker…
-
Unscored —
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possi…
-
Unscored —
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape…
-
Medium —
Jakarta Tomcat Denial of Service vulnerability
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
-
Unscored —
Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one …
-
Unscored —
Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 …
-
Unscored —CVE-2003-0033 EPSS 12%
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitra…
-
Unscored —CVE-2003-0143 Public exploit
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprin…
-
Unscored —
The RADIUS decoder in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service (crash) via an inv…
-
Unscored —
Apache 2.0 before 2.0.44 on Windows platforms allows remote attackers to obtain certain files via an HTTP request that …