Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) Pars…
-
Unscored —CVE-2004-0786 EPSS 24%
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a d…
-
Unscored —
The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a den…
-
Unscored —
The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (s…
-
High 7.8
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that cau…
-
Unscored —CVE-2004-0809 EPSS 17%
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process cra…
-
Unscored —
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and g…
-
Unscored —
Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier,…
-
Unscored —
Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attack…
-
Unscored —
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2…
-
Unscored —
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of …
-
Unscored —
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2004-0573 EPSS 42%
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites…
-
Unscored —
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPl…
-
Unscored —
OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow lo…
-
Unscored —
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP fil…
-
Unscored —
Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is impleme…
-
Unscored —
The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local user…
-
Unscored —
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via …
-
Unscored —
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of servic…
-
Unscored —
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allow…
-
Unscored —
Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2…
-
Unscored —CVE-2004-0806 Public exploit
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before exec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and ear…
-
Unscored —CVE-2004-0839 EPSS 34%
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbi…
-
Unscored —
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, w…
-
Unscored —
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd…
-
Unscored —
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.sh…
-
Unscored —
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPr…
-
Unscored —
LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its na…
-
Unscored —
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allow…
-
Unscored —
Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) libr…
-
Unscored —CVE-2004-0748 EPSS 25%
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting…
-
Unscored —
Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow rem…
-
Unscored —
Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local user…
-
Unscored —
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote …
-
Unscored —
Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrar…
-
Unscored —
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link…
-
Unscored —CVE-2004-0820 Public exploit
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML f…
-
Unscored —
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell meta…