Archive
January 2005
Vulnerabilities first published in this month (UTC), newest first.
174 results · Feed
-
Unscored —
Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary …
-
Unscored —
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large…
-
Unscored —
Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and co…
-
Unscored —CVE-2004-1380 Public exploit
Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow r…
-
Unscored —CVE-2004-1381 Public exploit
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the act…
-
Unscored —
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell …
-
Unscored —
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands …
-
Unscored —
Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (applica…
-
Unscored —CVE-2004-1150 Public exploit
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrar…
-
Unscored —
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, wh…
-
Unscored —
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incor…
-
Unscored —
cpio on FreeBSD 2.1.0, Debian GNU/Linux 3.0, and possibly other operating systems, uses a 0 umask when creating files u…
-
Unscored —
The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a sy…
-
Unscored —
Firefox before 1.0 allows the user to store a (1) javascript: or (2) data: URLs as a Livefeed bookmark, then executes i…
-
Unscored —
Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secu…
-
Unscored —
The DBI library (libdbi-perl) for Perl allows local users to overwrite arbitrary files via a symlink attack on a tempor…
-
Unscored —
Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (applica…
-
Unscored —
Buffer overflow in PeID allows attackers to execute arbitrary code via a PE file with an Import Address Table containin…
-
Unscored —
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to obtain sensitive data from the clipboard via Java…
-
Unscored —
The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delet…
-
Unscored —
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews pre…
-
Unscored —
Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, wh…
-
Unscored —
The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loo…
-
Unscored —
Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a de…
-
Unscored —
Firefox before 1.0 and Mozilla before 1.7.5 allow remote attackers to load local files via links "with a custom getter …
-
Unscored —
Firefox before 1.0 does not properly distinguish between user-generated and synthetic click events, which allows remote…
-
Unscored —
Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial…
-
Unscored —
vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.
-
Unscored —
Buffer overflow in xtrlock 2.0 allows local users to cause a denial of service (application crash) and hijack the deskt…
-
Unscored —
Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause "memory c…
-
Unscored —
Stack-based buffer overflow in the get_internal_addresses function in the pluto application for Openswan 1.x before 1.0…
-
Unscored —
Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a …
-
Unscored —
Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial…
-
Unscored —
diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
-
Unscored —
The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which a…
-
Unscored —
Buffer overflow in the X11 dissector in Ethereal 0.8.10 through 0.10.8 allows remote attackers to execute arbitrary cod…
-
Unscored —
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 server…
-
Unscored —
ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles tha…
-
Unscored —
Mail in Mac OS X 10.3.7, when generating a Message-ID header, generates a GUUID that includes information that identifi…
-
Unscored —
Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary …