CVEs published in June 2004
120 vulnerabilities, 33 critical, 0 exploited.
- www-sql project www-sql, debian linux +1 moreBuffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via...7.2 High
- rlprBuffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute...7.2 High
- rlprFormat string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote...10.0 High
- sup, debian linux +1 moreMultiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions...10.0 High
- symantec gateway security, enterprise firewall +1 moreThe DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to...5.0 Medium
- conectiva linux, linux kernel, avaya converged communications server +13 more +15 moreLinux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system...2.1 Low
- cisco catos, catalyst 2901, catalyst 2902 +21 more +23 moreCisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst...5.0 Medium
- realnetworks realplayerBuffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code...7.5 High
- microsoft internet explorerThe WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used...10.0 High
- gnu aspell, gentoo linux +1 moreMultiple stack-based buffer overflows in the word-list-compress functionality in compress.c for...7.2 High
- apple mac os x, mac os x server +1 moreThe "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute...10.0 High
- apple mac os x, mac os x server +1 moreLaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new...7.5 High
- cvs, gentoo linux, openbsd +2 more +4 moreserve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle...10.0 High
- cvs, gentoo linux, openbsd +2 more +4 moreInteger overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x...5.0 Medium
- cvs, gentoo linux, openbsd +2 more +4 moreDouble free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x...10.0 High
- businessobjects crystal enterprise, crystal reports, microsoft business solutions crm +6 more +8 moreDirectory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and...7.5 High
- microsoft directx, windows 2000, windows 2003 server +4 more +6 moreIDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as...5.0 Medium
- ibm aixLVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.7.2 High
- ibm aixMultiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the...7.2 High
- oracle applications, e-business suite +1 moreMultiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11...10.0 High
- phpPHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which...10.0 High
- national science foundation squid web proxy cacheBuffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2...10.0 High
- cvs, gentoo linux, openbsd +2 more +4 moreCVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry"...10.0 High
- microsoft windows 2000Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is...10.0 High
- opera browserOpera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is...5.0 Medium
- tripwireFormat string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open...7.2 High
- conectiva linux, linux kernel, engardelinux secure community +12 more +14 moreThe e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before...2.1 Low
- No product listedThe PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes ...7.2 High
- cluecentral suexec.patchThe modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31...7.2 High
- netscape navigatorNetscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A...5.0 Medium
- kde konquerorKDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar...5.0 Medium
- microsoft ie, internet explorer, outlook +1 more +3 moreUnknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate...5.0 Medium
- hp integrated lights-out firmwareHP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to...5.0 Medium
- No product listedBuffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in...10.0 High
- postgresqlBuffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a...5.0 Medium
- mit kerberos, kerberos 5, sgi propack +4 more +6 moreMultiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier...10.0 High
- squirrelmail, sgi propack +1 moreSQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute...10.0 High
- squirrelmail, open webmail webmail, sgi propack +2 moreCross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote...6.8 Medium
- squirrelmail, sgi propack +1 moreMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers...6.8 Medium
- apple mac os x, mac os x server +1 moreUnknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and...7.5 High
- apple mac os x, mac os x server +1 moreUnknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package...4.6 Medium
- apple mac os x, mac os x server +1 moreUnknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different...4.6 Medium
- apple mac os x, mac os x server +1 moreUnknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log...4.6 Medium
- apple mac os x, mac os x server +1 moreUnknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory...7.2 High
- apple mac os xUnspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related...10.0 High
- ethereal group ethereal, sgi propack +1 moreBuffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to...10.0 High
- ethereal group ethereal, sgi propack +1 moreThe SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of...5.0 Medium
- ethereal group ethereal, sgi propack +1 moreThe AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert...5.0 Medium
- ethereal group ethereal, sgi propack +1 moreEthereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP...5.0 Medium
- microsoft outlookMicrosoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and...5.0 Medium
- Show moreLoading…