Archive
November 2004
Vulnerabilities first published in this month (UTC), newest first.
52 results · Feed
-
Unscored —
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that cont…
-
Unscored —
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) v…
-
Unscored —
NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP addres…
-
Unscored —
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypa…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to injec…
-
Unscored —
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create…
-
Unscored —
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and l…
-
Unscored —
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by ca…
-
Unscored —
Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via cert…
-
Unscored —
iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that us…
-
Unscored —
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, d…
-
Unscored —
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with …
-
Unscored —
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and…
-
Unscored —
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a f…
-
Unscored —
changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authen…
-
Unscored —
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global h…
-
Unscored —
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2)…
-
Unscored —
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (in…
-
Unscored —
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote atta…
-
Unscored —
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause…
-
Unscored —
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execu…
-
Unscored —
distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which…
-
Unscored —
The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions…
-
Unscored —
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local use…
-
Unscored —
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attacker…
-
Unscored —
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compres…
-
Unscored —
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 200…
-
Unscored —
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which …
-
Unscored —
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirem…
-
Unscored —
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a c…
-
Unscored —CVE-2004-0941 EPSS 11%
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute a…
-
Unscored —
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and g…
-
Unscored —
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadabl…
-
Unscored —CVE-2004-0882 EPSS 14%
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute…
-
Unscored —
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary c…
-
Unscored —
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in…
-
Unscored —
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to creat…
-
Unscored —
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to…
-
Unscored —
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or…