Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —
Buffer overflow in typespeed 0.4.2 and earlier allows local users to gain privileges via long input.
-
Unscored —
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not prope…
-
Unscored —
Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration …
-
Unscored —
Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from …
-
Unscored —CVE-2002-1414 Public exploit
Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment varia…
-
Unscored —CVE-2002-1437 EPSS 17%
Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote a…
-
Unscored —
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi…
-
Unscored —
Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffe…
-
Unscored —
Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random…
-
Unscored —CVE-2002-1493 Public exploit
Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script…
-
Unscored —CVE-2002-1505 Public exploit
SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers t…
-
Unscored —
admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.…
-
Unscored —
A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not proper…
-
Unscored —CVE-2002-1185 EPSS 21%
Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allo…
-
Unscored —
Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users…
-
Unscored —
Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of serv…
-
Unscored —
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted addr…
-
Unscored —
openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequenc…
-
Unscored —
Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET reque…
-
Unscored —
The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving…
-
Unscored —
nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does n…
-
Unscored —
Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute …
-
Unscored —
fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .…
-
Unscored —
Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing …
-
High —
Apache Tomcat Source Code Disclosure
Apache Tomcat 4.0.5 and earlier, when using both the invoker servlet and the default servlet, allows remote attackers to read source code for server files or bypass certain protections, a variant of CAN-2002-1148.
-
Unscored —
os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow lo…
-
Unscored —
BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request contai…
-
Unscored —CVE-2002-1169 Public exploit
IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of s…
-
Unscored —
Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on…
-
Unscored —
The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly o…
-
Unscored —
The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libre…
-
Unscored —
Heap-based buffer overflow in the Remote Data Services (RDS) component of Microsoft Data Access Components (MDAC) 2.1 t…
-
Unscored —
The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local…
-
Unscored —
Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow loca…
-
Unscored —
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.
-
Unscored —CVE-2002-1405 Public exploit
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTT…
-
Unscored —
Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute …
-
Unscored —
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which all…
-
Unscored —
Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that i…
-
Unscored —CVE-2002-1248 Public exploit
Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to caus…