CVEs published in September 2004
145 vulnerabilities, 11 critical, 0 exploited.
- cpanel cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink... 5.0 Medium
- freenet6 The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has... 2.1 Low
- realnetworks realplayer, realone player +1 more Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote... 2.6 Low
- debian netkit telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows... 5.0 Medium
- squid The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM... 5.0 Medium
- ibm aix The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop... 2.1 Low
- sophos small business suite Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain... 7.5 High
- debian linux Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail... 7.5 High
- leadmind popmessenger The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers... 5.0 Medium
- mozilla, mozilla thunderbird +1 more Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may... 5.1 Medium
- mozilla, mozilla thunderbird +1 more Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8... 4.0 Medium
- mozilla, mozilla thunderbird +1 more The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before... 4.6 Medium
- mozilla, mozilla thunderbird +1 more The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and... 4.6 Medium
- mozilla firefox, mozilla, mozilla thunderbird +6 more +8 more Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release,... 10.0 High
- mozilla, mozilla thunderbird, conectiva linux +4 more +6 more Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox... 10.0 High
- mozilla, mozilla thunderbird, conectiva linux +4 more +6 more Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla... 10.0 High
- getmail, gentoo linux +1 more getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users... 2.1 Low
- getmail, gentoo linux +1 more getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a... 1.2 Low
- phpgroupware Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002... 6.8 Medium
- apple ichat, ichat av +1 more Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a... 7.5 High
- microsoft ie, mozilla firefox, kde konqueror +2 more +4 more Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains,... 7.5 High
- joerg schilling star tape archiver Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external... 7.2 High
- apple mac os x server QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers... 5.0 Medium
- apple mac os x, mac os x server +1 more The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded... 7.2 High
- ide-cd Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only... 2.1 Low
- apache http server Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which... 7.5 High
- openca Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0... 4.3 Medium
- redhat enterprise linux, enterprise linux desktop +1 more Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple... 7.5 High
- openbsd, suse linux, x.org x11r6 +2 more Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2)... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- clearswift mailsweeper, f-secure internet gatekeeper, paul l daniels ripmime +2 more Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- No product listed Multiple content security gateway and antivirus products allow remote attackers to bypass content... 7.5 High
- openbsd, suse linux, x.org x11r6 +2 more Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in... 7.5 High
- enlightenment imlib, imlib2, conectiva linux +11 more +13 more Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute... 5.1 Medium
- pinnacle systems showcenter SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service... 5.0 Medium
- No product listed The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3... 7.5 High
- emulive server4 EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service ... 5.0 Medium
- symantec on command ccm, on icommand +1 more Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of... 7.5 High
- jabberstudio jabberd, jadc2s +1 more The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s... 5.0 Medium
- emulive server4 EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for... 10.0 High
- mambo PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote... 7.5 High
- mambo open source Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote... 4.3 Medium
- rhinosoft dns4me The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU... 5.0 Medium
- rhinosoft dns4me Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote... 4.3 Medium
- gnu radius Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius... 5.0 Medium
- Show olderLoading…