Archive
19 November 2004
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with …
-
Unscored —
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and…
-
Unscored —
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a f…
-
Unscored —
changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authen…
-
Unscored —
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global h…
-
Unscored —
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2)…
-
Unscored —
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (in…
-
Unscored —
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote atta…
-
Unscored —
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause…
-
Unscored —
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execu…
-
Unscored —
distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which…
-
Unscored —
The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions…
-
Unscored —
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local use…
-
Unscored —
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attacker…
-
Unscored —
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compres…
-
Unscored —
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 200…
-
Unscored —
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which …
-
Unscored —
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirem…
-
Unscored —
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a c…
-
Unscored —CVE-2004-0941 EPSS 11%
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute a…
-
Unscored —
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and g…
-
Unscored —
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadabl…
-
Unscored —CVE-2004-0882 EPSS 14%
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute…
-
Unscored —
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary c…
-
Unscored —
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in…