Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
125 results · Clear filters · Feed
-
Unscored —
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device n…
-
Unscored —
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of …
-
Unscored —
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPl…
-
Unscored —
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2004-0806 Public exploit
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before exec…
-
Unscored —
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.sh…
-
Unscored —
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allow…
-
Unscored —CVE-2004-0820 Public exploit
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML f…
-
Unscored —CVE-2004-0077 Public exploit
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not pro…
-
Unscored —CVE-2004-0032 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary H…
-
Unscored —
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, …
-
Unscored —CVE-2004-0114 Public exploit
The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and …
-
Unscored —CVE-2004-0276 Public exploit
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denia…
-
Unscored —CVE-2004-0186 Public exploit
smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting…
-
Unscored —
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) a…
-
Unscored —CVE-2004-0129 Public exploit
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitra…
-
Unscored —CVE-2004-0128 Public exploit
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows rem…
-
Unscored —
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a …
-
Unscored —
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail me…
-
Unscored —
Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to e…
-
Unscored —
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Serv…
-
Unscored —CVE-2004-0070 Public exploit
PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2004-0261 Public exploit
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel v…
-
Unscored —
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when…
-
Unscored —CVE-2004-0159 Public exploit
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly e…
-
Unscored —CVE-2004-0033 Public exploit
admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a php…
-
Unscored —
Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (…
-
Unscored —
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow a…
-
Unscored —CVE-2001-0423 Public exploit
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environm…
-
Unscored —
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbit…
-
Unscored —CVE-2001-0485 Public exploit
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attac…
-
Unscored —CVE-2001-0548 Public exploit
Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.
-
Unscored —CVE-2001-0741 Public exploit
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
-
Unscored —
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to …
-
Unscored —CVE-2001-0907 Public exploit
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a seri…
-
Unscored —CVE-2001-0042 Public exploit
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack conta…
-
Unscored —
The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood …
-
Unscored —
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value …
-
Unscored —CVE-2001-1347 Public exploit
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpo…
-
Unscored —CVE-2001-1029 Public exploit
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading th…