Archive
December 2004
Vulnerabilities first published in this month (UTC), newest first.
78 results · Clear filters · Feed
-
Unscored —
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Se…
-
Unscored —
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phras…
-
Unscored —
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics"…
-
Unscored —
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attac…
-
Unscored —CVE-2004-1054 Public exploit
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privil…
-
Unscored —
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing…
-
Unscored —CVE-2004-1300 Public exploit
Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to …
-
Unscored —
Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-1282 Public exploit
Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2004-1267 Public exploit
Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote atta…
-
Unscored —
Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for …
-
Unscored —
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitr…
-
Unscored —
Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2004-1303 Public exploit
Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code…
-
Unscored —CVE-2004-1291 Public exploit
Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, …
-
Unscored —
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before …
-
Unscored —CVE-2004-1264 Public exploit
Buffer overflow in the simplify_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary cod…
-
Unscored —CVE-2004-1301 Public exploit
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbit…
-
Unscored —
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via …
-
Unscored —
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows r…
-
Unscored —
Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abc…
-
Unscored —
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote at…
-
Unscored —
Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to exec…
-
Unscored —CVE-2004-1269 Public exploit
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing t…
-
Unscored —
Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbit…
-
Unscored —CVE-2004-1261 Public exploit
Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code …
-
Unscored —CVE-2004-1298 Public exploit
Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a c…
-
Unscored —CVE-2004-1259 Public exploit
Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute…
-
Unscored —CVE-2004-0894 Public exploit
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly val…
-
Unscored —CVE-2004-1016 Public exploit
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users t…
-
Unscored —CVE-2004-1217 Public exploit
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories b…
-
Unscored —
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local a…
-
Unscored —CVE-2004-1214 Public exploit
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format spec…
-
Unscored —CVE-2004-1227 Public exploit
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary …
-
Unscored —
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers t…
-
Unscored —CVE-2004-1216 Public exploit
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server f…
-
Unscored —CVE-2004-1206 Public exploit
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrar…
-
Unscored —CVE-2004-1221 Public exploit
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. s…
-
Unscored —
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of…