Archive
19 January 2005
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
Unscored —
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwr…
-
Unscored —
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service …
-
Unscored —CVE-2004-1049 EPSS 30%
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitr…
-
Unscored —
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to …
-
Unscored —
The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security …
-
Unscored —
Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges.
-
Unscored —
Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrar…
-
Unscored —
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite…
-
Unscored —
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows loca…
-
Unscored —CVE-2005-0097 EPSS 11%
The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a …
-
Unscored —CVE-2005-0095 EPSS 69%
The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —
Apache mod_auth_radius 1.5.4 and libpam-radius-auth allow remote malicious RADIUS servers to cause a denial of service …
-
Unscored —
poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password cor…
-
Unscored —
AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharact…
-
Unscored —CVE-2005-0068 EPSS 54%
The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easi…
-
Unscored —
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2)…
-
Unscored —CVE-2005-0067 EPSS 13%
The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which ma…
-
Unscored —CVE-2005-0066 EPSS 11%
The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an …
-
Unscored —
Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrar…
-
Unscored —
The 55_options_traceback.dpatch patch for mailman 2.1.5 in Ubuntu 4.10 displays a different error message depending on …
-
Unscored —
Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers t…
-
Unscored —
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers…
-
Unscored —
helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid progra…
-
Unscored —
inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, wh…
-
Unscored —
The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of …
-
Unscored —
Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute…
-
Unscored —
Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, w…
-
Unscored —
Memory leak in the NTLM fakeauth_auth helper for Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denia…
-
Unscored —
Buffer overflow in the gopherToHTML function in the Gopher reply parser for Squid 2.5.STABLE7 and earlier allows remote…
-
Unscored —
helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.
-
Unscored —
helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which a…
-
Unscored —
Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.
-
Unscored —
Internet Explorer 6 on Windows XP SP2 allows remote attackers to bypass the file download warning dialog and possibly t…
-
Unscored —
Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map nam…
-
Unscored —
gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary fil…
-
Unscored —CVE-2003-1054 Public exploit
mod_access_referer 1.0.2 allows remote attackers to cause a denial of service (crash) via a malformed Referer header th…
-
Unscored —
Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long (1) -KCONV command line optio…