December 2004

245 results · Feed

• Unscored —
  CVE-2004-0567 Public exploit EPSS 69%

  The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Se…

  Dec 31, 2004
• Unscored —
  CVE-2004-0998

  Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.

  netkit-telnet-ssl Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-0452

  Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for …

  perl Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-0999

  zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted m…

  Dec 31, 2004
• Unscored —
  CVE-2004-0852

  Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.

  Dec 31, 2004
• Unscored —
  CVE-2004-1062

  Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML an…

  Dec 31, 2004
• Unscored —
  CVE-2004-1189

  The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a …

  krb5 Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1315 Public exploit EPSS 73%

  viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phras…

  Dec 31, 2004
• Unscored —
  CVE-2004-1139

  Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denia…

  Dec 31, 2004
• Unscored —
  CVE-2004-1179

  The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files…

  debmake Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1234

  load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary…

  Dec 31, 2004
• Unscored —
  CVE-2004-1061

  Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attack…

  Dec 31, 2004
• Unscored —
  CVE-2004-1140

  Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill…

  Dec 31, 2004
• Unscored —
  CVE-2004-1145

  Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScri…

  Dec 31, 2004
• Unscored —
  CVE-2004-1296

  The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlin…

  groff Debian
  Dec 31, 2004
• Unscored —
  CVE-2004-1017

  Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.

  Dec 31, 2004
• Unscored —
  CVE-2004-1141

  The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application …

  Dec 31, 2004
• Unscored —
  CVE-2004-1043 Public exploit EPSS 45%

  Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics"…

  Dec 31, 2004
• Unscored —
  CVE-2004-1059

  Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject …

  Dec 31, 2004
• Unscored —
  CVE-2004-1144

  Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.

  Dec 31, 2004
• Unscored —
  CVE-2004-1317 Public exploit EPSS 60%

  Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attac…

  Dec 31, 2004
• Unscored —
  CVE-2004-1142

  Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malf…

  Dec 31, 2004
• Unscored —
  CVE-2004-1316

  Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote a…

  Dec 31, 2004
• Unscored —
  CVE-2004-1146

  Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote…

  Dec 31, 2004
• Unscored —
  CVE-2004-0946 EPSS 11%

  rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer con…

  Dec 22, 2004
• Unscored —
  CVE-2004-1268

  lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt t…

  cups Debian
  Dec 22, 2004
• Unscored —
  CVE-2004-1054 Public exploit

  Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privil…

  Dec 22, 2004
• Unscored —
  CVE-2004-1254 Public exploit EPSS 10%

  WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing…

  Dec 22, 2004
• Unscored —
  CVE-2004-1297

  Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arb…

  unrtf Debian
  Dec 22, 2004
• Unscored —
  CVE-2004-1058

  Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is stil…

  Dec 22, 2004
• Unscored —
  CVE-2004-1311

  Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers t…

  mplayer Debian
  Dec 22, 2004
• Unscored —
  CVE-2004-1277

  The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to over…

  Dec 22, 2004
• Unscored —
  CVE-2004-1265

  Buffer overflow in the readObjectChunk function in 3dsimp.cpp for the convex-tool program in Convex 3D 0.8pre1 allows r…

  Dec 22, 2004
• Unscored —
  CVE-2004-1263

  changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modify…

  Dec 22, 2004
• Unscored —
  CVE-2004-1019

  The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of serv…

  Dec 22, 2004
• Unscored —
  CVE-2004-1281

  The ftp_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot)…

  Dec 22, 2004
• Unscored —
  CVE-2004-1271

  Buffer overflow in the dxfin function in d.c for dxfscope 0.2 allows remote attackers to execute arbitrary code via a c…

  Dec 22, 2004
• Unscored —
  CVE-2004-1302

  The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file…

  Dec 22, 2004
• Unscored —
  CVE-2004-1300 Public exploit

  Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to …

  Dec 22, 2004
• Unscored —
  CVE-2004-1299 Public exploit EPSS 12%

  Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary c…

  Dec 22, 2004