Archive
January 2005
Vulnerabilities first published in this month (UTC), newest first.
174 results · Feed
-
Unscored —
Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with worl…
-
Unscored —
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from ar…
-
Unscored —
An "incorrect assumption" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote …
-
Unscored —CVE-2005-0033 EPSS 11%
Buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a …
-
Unscored —
zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read ar…
-
Unscored —
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section …
-
Unscored —
direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating…
-
Unscored —
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null de…
-
Unscored —
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," pos…
-
Unscored —
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already fre…
-
Unscored —
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free u…
-
Unscored —
htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
-
Unscored —
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of …
-
Unscored —
Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an …
-
Unscored —
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unk…
-
Unscored —
Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impac…
-
Unscored —
Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.
-
Unscored —
Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —
The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel na…
-
Unscored —
The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earl…
-
Unscored —
Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrar…
-
Unscored —
The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead …
-
Unscored —
Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated wit…
-
Unscored —
Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows lo…
-
Unscored —CVE-2004-1235 Public exploit
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.…
-
Unscored —
The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow …
-
Unscored —
The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to…
-
Unscored —
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions includi…
-
Unscored —
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapp…
-
Unscored —
MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) v…
-
Unscored —
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or…
-
Unscored —
Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly exe…
-
Unscored —CVE-2004-0897 EPSS 43%
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which…
-
Unscored —
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server R…
-
Unscored —
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm…
-
Unscored —
Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a den…
-
Unscored —
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not…
-
Unscored —
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (syst…
-
Unscored —CVE-2004-1366 EPSS 15%
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properti…
-
Unscored —
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in…