CVEs published in February 2004

71 vulnerabilities, 7 critical, 0 exploited.

• No product listed The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2... CVE-2004-0944 5.0 MediumFebruary 28, 2004
• No product listed Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows... CVE-2004-1360 2.1 LowFebruary 27, 2004
• xboing Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges. CVE-2004-0149 Fix available 4.6 MediumFebruary 27, 2004
• confirm Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail... CVE-2004-0324 7.5 HighFebruary 23, 2004
• xmb forum xmb Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers... CVE-2004-0322 Public exploit 4.3 MediumFebruary 23, 2004
• juan cespedes ltrace Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is... CVE-2004-0172 7.2 HighFebruary 23, 2004
• samhain labs hsftp Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of... CVE-2004-0159 Public exploitFix available 7.5 HighFebruary 22, 2004
• openconnect webconnect WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of... CVE-2004-0466 5.0 MediumFebruary 21, 2004
• synaesthesia Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on... CVE-2004-0160 Fix available 7.2 HighFebruary 21, 2004
• lgames lbreakout2 Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large... CVE-2004-0158 Public exploitFix available 4.6 MediumFebruary 21, 2004
• linux kernel dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or... CVE-2004-2136 2.1 LowFebruary 19, 2004
• kame racoon KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to... CVE-2004-0164 Public exploitFix available 5.0 MediumFebruary 19, 2004
• metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 more Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary... CVE-2004-0105 Fix available 7.5 HighFebruary 19, 2004
• metamail corporation metamail, redhat enterprise linux, linux advanced workstation +1 more +3 more Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to... CVE-2004-0104 Public exploitFix available EPSS 26.2% 7.5 HighFebruary 19, 2004
• openh323 project pwlib Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of... CVE-2004-0097 Fix available EPSS 10.3% 10.0 HighFebruary 19, 2004
• linux kernel Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows... CVE-2004-0010 Fix available 7.2 HighFebruary 19, 2004
• xfree86 project x11r6 Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service... CVE-2004-0094 Fix available 7.5 HighFebruary 19, 2004
• xfree86 project x11r6 XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary... CVE-2004-0093 Fix available 7.5 HighFebruary 19, 2004
• netwosix linux, linux kernel, redhat bigmem kernel +3 more +5 more The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6... CVE-2004-0077 Public exploitFix available 7.2 HighFebruary 18, 2004
• mcafee epolicy orchestrator McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory... CVE-2004-0095 Public exploit EPSS 37.2% 5.0 MediumFebruary 17, 2004
• visualshapers ezcontents PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to... CVE-2004-0070 Public exploit 7.5 HighFebruary 17, 2004
• phpdig.net phpdig PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote... CVE-2004-0068 7.5 HighFebruary 17, 2004
• ncipher payshield spp library The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a... CVE-2004-0063 7.5 HighFebruary 17, 2004
• realnetworks helix universal server, helix universal mobile server +1 more Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of... CVE-2004-0049 6.8 MediumFebruary 17, 2004
• openca The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares... CVE-2004-0004 7.5 HighFebruary 17, 2004
• linux kernel Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel... CVE-2004-0001 Fix available 7.2 HighFebruary 17, 2004
• kde Buffer overflow in the VCF file information reader for KDE Personal Information Management ... CVE-2003-0988 Fix available 7.5 HighFebruary 17, 2004
• elm development group elm Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows... CVE-2003-0966 7.5 HighFebruary 17, 2004
• microsoft data access components Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows... CVE-2003-0903 EPSS 37.5% 10.0 HighFebruary 17, 2004
• debian linux, mandrakesoft mandrake linux, mandrake linux corporate server +2 more +4 more Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures,... CVE-2004-1180 Fix available 5.0 MediumFebruary 16, 2004
• openbsd, xfree86 project x11r6 +1 more Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font... CVE-2004-0106 Fix available 7.2 HighFebruary 16, 2004
• nokia 6310i Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial... CVE-2004-0143 5.0 MediumFebruary 14, 2004
• visualshapers ezcontents Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote... CVE-2004-0132 Public exploit 7.5 HighFebruary 14, 2004
• openbsd, xfree86 project x11r6 +1 more Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the... CVE-2004-0084 Public exploitFix available EPSS 24.9% 10.0 HighFebruary 14, 2004
• openbsd, xfree86 project x11r6 +1 more Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users... CVE-2004-0083 Public exploitFix available EPSS 21.2% 10.0 HighFebruary 14, 2004
• karjasoft sami ftp server The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a... CVE-2004-2082 Public exploit 5.0 MediumFebruary 13, 2004
• sophos anti-virus Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail... CVE-2004-2088 5.0 MediumFebruary 12, 2004
• opera browser Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a... CVE-2004-2083 2.6 LowFebruary 11, 2004
• checkpoint firewall-1 Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check... CVE-2004-0039 10.0 HighFebruary 11, 2004
• visualshapers ezcontents Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows... CVE-2003-1214 7.5 HighFebruary 11, 2004
• microsoft windows nt, windows 2000, windows 2003 server +1 more +3 more Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32... CVE-2003-0818 Public exploit EPSS 82.2% 7.5 HighFebruary 11, 2004
• mit cgiemail cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded... CVE-2002-1575 Fix available 5.0 MediumFebruary 11, 2004
• microsoft baseline security analyzer Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have... CVE-2004-2091 5.0 MediumFebruary 10, 2004
• rsync Debian Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows... CVE-2004-2093 Public exploitFix available 4.6 MediumFebruary 9, 2004
• broadcom inoculateit eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories,... CVE-2004-2092 4.6 MediumFebruary 9, 2004
• red-m red-alert Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set... CVE-2004-2080 5.0 MediumFebruary 9, 2004
• red-m red-alert Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which... CVE-2004-2079 7.5 HighFebruary 9, 2004
• red-m red-alert Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of... CVE-2004-2078 Public exploit 5.0 MediumFebruary 9, 2004
• sandsurfer Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a... CVE-2004-2087 7.5 HighFebruary 8, 2004
• nadeo game engine, trackmania, virtual skipper +2 more Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to... CVE-2004-2077 Public exploit 5.0 MediumFebruary 8, 2004
• Show olderLoading…