Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file …
-
Unscored —
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by fo…
-
Unscored —
Integer signedness error in the myFseek function of samplein.c for Blade encoder (BladeEnc) 0.94.2 and earlier allows r…
-
Unscored —
The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify t…
-
Unscored —
Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," a…
-
Unscored —
The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Intern…
-
Unscored —CVE-2003-0122 EPSS 10%
Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to…
-
Unscored —
Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to ex…
-
Unscored —
netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.
-
Unscored —
Linux kernel 2.4.10 through 2.4.21-pre4 does not properly handle the O_DIRECT feature, which allows local attackers wit…
-
Unscored —
isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) vi…
-
Unscored —
The PuTTY terminal emulator 0.53 allows attackers to modify the window title via a certain character escape sequence an…
-
Unscored —
Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are…
-
Unscored —CVE-2003-0004 Public exploit
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code…
-
Unscored —
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink…
-
Unscored —
Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a d…
-
Unscored —
Memory leak in libmcrypt before 2.5.5 allows attackers to cause a denial of service (memory exhaustion) via a large num…
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …
-
Unscored —
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execu…
-
Unscored —CVE-2003-0019 Public exploit
uml_net in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, which allows local user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and Qui…
-
Unscored —
Buffer overflow in Eset Software NOD32 for UNIX before 1.013 allows local users to execute arbitrary code via a long pa…
-
Unscored —
The uxterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and th…
-
Unscored —CVE-2003-0124 Public exploit
man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes …
-
Unscored —
Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote attackers to exec…
-
Unscored —
parse_xml.cgi in Apple Darwin Streaming Administration Server 4.1.2 and QuickTime Streaming Server 4.1.1 allows remote …
-
Unscored —CVE-2003-0016 EPSS 18%
Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a…
-
Unscored —
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security cer…
-
Unscored —
Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote att…
-
Unscored —
The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain …
-
Unscored —CVE-2003-0993 EPSS 11%
mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny ru…
-
Unscored —
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attacker…
-
Unscored —
Unknown vulnerability in CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user, and possi…
-
Unscored —
The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape…
-
Medium —
Jakarta Tomcat Denial of Service vulnerability
Jakarta Tomcat before 3.3.1a on certain Windows systems may allow remote attackers to cause a denial of service (thread hang and resource consumption) via a request for a JSP page containing an MS-DOS device name, such as aux.jsp.
-
Unscored —
Unknown vulnerability in the chk_trans.c of the libkrb5 library for MIT Kerberos V5 before 1.2.5 allows users from one …
-
Unscored —
Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 …
-
Unscored —CVE-2003-0033 EPSS 12%
Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitra…