CVEs published in January 2004
100 vulnerabilities, 6 critical, 0 exploited.
- dameware development mini remote control serverBuffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute...7.5 High
- lbl tcpdumpThe L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial...5.0 Medium
- gnu mailmanCross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows...4.3 Medium
- redhat tcpdump, linux +1 moretcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via...7.5 High
- gnu mailmanCross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows...6.8 Medium
- microsoft proxy serverBuffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000...10.0 High
- hp hp-uxBuffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local...7.2 High
- sco unixware, openserver +1 moreUnknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape...4.6 Medium
- No product listedCross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject...4.3 Medium
- yahoo messengerBuffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to...7.5 High
- beasts vsftpdvsftpd 1.1.3 generates different error messages depending on whether or not a valid username...5.0 Medium
- microsoft ie, internet explorer +1 moreInternet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and...7.5 High
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read...7.5 High
- microsoft ie, internet explorer +1 moreInternet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1)...7.5 High
- microsoft ie, internet explorer +1 moreInternet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read...7.5 High
- microsoft ie, internet explorer +1 moreInternet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and...7.5 High
- nokia ggsnNokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service ...5.0 Medium
- sgi irixSGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a...2.1 Low
- ibm aixThe secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with...7.5 High
- entrust authority security managerEntrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to...2.1 Low
- microsoft windows 2000, windows xp +1 moreThe Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not...4.6 Medium
cvsDebiancvs - remote vulnerabilityNo score- mod auth shadow auth shadowThe mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user...7.5 High
- samba jitterbugjitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to...7.5 High
- debian lintianlintian 1.23 and earlier removes the working directory even if it was not created by lintian,...2.1 Low
- phpgroupwareMultiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for...7.5 High
- phpgroupwareThe calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for...7.5 High
- opentext firstclass desktop clientFirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via...7.5 High
- phorumMultiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote...4.3 Medium
- phpgedviewPHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and ...9.8 Critical
- ibm lotus dominoLotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable...4.6 Medium
- microsoft internet explorer, ie +1 moreThe download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache...5.0 Medium
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors...10.0 High
- microsoft internet explorer, ie +1 moreInternet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a...9.3 High
- microsoft sharepoint services, exchange server, windows server 2003 +2 moreMicrosoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication,...6.0 Medium
- ibm aixThe getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows...5.0 Medium
- vbox3vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL...7.2 High
- microsoft internet explorerInternet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a "...4.3 Medium
- sun sunosUnknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to...7.2 High
- midnight commander commanderStack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc...7.5 High
- No product listedThe parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to...7.5 High
- jabber software foundation serverjabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections,...5.0 Medium
- debian fspBuffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.7.5 High
- debian fspDirectory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files...7.5 High
- linux kernelThe mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other...7.2 High
- ndMultiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers...7.5 High
- mpg321mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via...7.5 High
- iatek portalappPortalApp places user credentials under the web root with insufficient access control, which...5.0 Medium
- invision power services boardSQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers...7.5 High
- webcam corp watchdogBuffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute...7.5 High