Latest CVE Feed
-
10.0
HIGHCVE-2004-0926
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2005-0313
Multiple directory traversal vulnerabilities in Magic Winmail Server 4.0 Build 1112 allow remote attackers to (1) upload arbitrary files via certain parameters to upload.php or (2) read arbitrary files via certain parameters to download.php, and remote au... Read more
Affected Products : magic_winmail_server- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0892
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed ... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0925
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0922
AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows att... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2004-0887
SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0932
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which doe... Read more
Affected Products : brightstor_arcserve_backup suse_linux etrust_ez_antivirus etrust_intrusion_detection kaspersky_anti-virus linux mandrake_linux etrust_secure_content_manager sophos_anti-virus etrust_antivirus +13 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities vi... Read more
Affected Products : application_portal- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remot... Read more
Affected Products : brightstor_arcserve_backup suse_linux etrust_ez_antivirus etrust_intrusion_detection kaspersky_anti-virus linux mandrake_linux etrust_secure_content_manager sophos_anti-virus etrust_antivirus +13 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0935
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system... Read more
Affected Products : brightstor_arcserve_backup suse_linux etrust_ez_antivirus etrust_intrusion_detection kaspersky_anti-virus linux mandrake_linux etrust_secure_content_manager sophos_anti-virus etrust_antivirus +13 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0921
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0927
ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2004-0880
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.... Read more
Affected Products : brightstor_arcserve_backup suse_linux etrust_ez_antivirus etrust_intrusion_detection kaspersky_anti-virus linux mandrake_linux etrust_secure_content_manager sophos_anti-virus etrust_antivirus +13 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2004-0902
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" ... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0886
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.... Read more
Affected Products : enterprise_linux enterprise_linux_desktop mac_os_x mac_os_x_server libtiff suse_linux linux_advanced_workstation mandrake_linux fedora_core secure_linux +3 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2004-0924
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.... Read more
- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.... Read more
Affected Products : brightstor_arcserve_backup suse_linux etrust_ez_antivirus etrust_intrusion_detection kaspersky_anti-virus linux mandrake_linux etrust_secure_content_manager sophos_anti-virus etrust_antivirus +13 more products- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025
-
4.3
MEDIUMCVE-2005-0314
Cross-site scripting (XSS) vulnerability in user.php in Magic Winmail Server 4.0 Build 1112 allows remote attackers to inject arbitrary web script or HTML via the personal information fields.... Read more
Affected Products : magic_winmail_server- Published: Jan. 27, 2005
- Modified: Apr. 03, 2025