Archive
October 2004
Vulnerabilities first published in this month (UTC), newest first.
79 results · Feed
-
Unscored —
Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain …
-
Unscored —
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disab…
-
Unscored —
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authent…
-
Unscored —
Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Admi…
-
Unscored —CVE-2004-0511 Public exploit
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow…
-
Unscored —CVE-2004-0510 Public exploit
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attack…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arb…
-
Unscored —
ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allow…
-
Unscored —
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attacker…
-
Unscored —
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a d…
-
Unscored —
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authen…
-
Unscored —
AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which caus…
-
Unscored —
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow…
-
Unscored —
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled w…
-
Unscored —
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allo…
-
Unscored —
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allo…
-
Unscored —
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer ove…
-
Unscored —CVE-2004-0985 EPSS 20%
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a docu…
-
Unscored —CVE-2004-0940 Public exploit
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI…
-
Unscored —
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local u…
-
Unscored —
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or m…
-
Unscored —
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphi…
-
Unscored —
SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which a…
-
Unscored —
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to c…
-
Unscored —
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a d…
-
Unscored —
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to…
-
Unscored —
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service…
-
Unscored —
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the u…
-
Unscored —CVE-2004-0978 EPSS 38%
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when us…
-
Unscored —CVE-2004-0918 EPSS 16%
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote at…
-
Unscored —
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes…
-
Unscored —
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) …
-
Unscored —
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating sy…
-
Unscored —
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to…
-
Unscored —
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-speci…
-
Unscored —
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix S…
-
Unscored —
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows l…
-
Unscored —
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and p…
-
Unscored —
Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a s…