CVEs published in November 2004
55 vulnerabilities, 19 critical, 0 exploited.
- open group scalable ogo Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view... 5.0 Medium
- carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote... 10.0 High
- carnegie mellon university cyrus imap server, conectiva linux, openpkg +2 more +4 more The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote... 10.0 High
- yard radius radius Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to... 10.0 High
- phpmyadmin, gentoo linux +1 more Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow... 6.8 Medium
- freebsd fetch Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute... 10.0 High
- thibault godouet fcron, gentoo linux +1 more Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which... 2.1 Low
- thibault godouet fcron, gentoo linux +1 more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete... 2.1 Low
- thibault godouet fcron, gentoo linux +1 more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass... 7.2 High
- thibault godouet fcron, gentoo linux +1 more fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain... 2.1 Low
- sun jre, conectiva linux, hp hp-ux +4 more +6 more The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and... 9.3 High
- apple ical iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when... 7.5 High
- danware data netop NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname,... 5.0 Medium
- arj software inc. unarj, gentoo linux +1 more Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an... 10.0 High
- netopia timbuktu pro mac Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service ... 5.0 Medium
- twiki, gentoo linux +1 more The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via... 10.0 High
- proxytunnel Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows... 10.0 High
- gd graphics library gdlib, trustix secure linux +1 more Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote... 10.0 High
- neoteris instant virtual extranet changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP... 5.0 Medium
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0,... 7.5 High
- archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 more RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with... 7.5 High
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus... 7.5 High
- archive zip zip, broadcom brightstor arcserve backup, etrust antivirus +16 more +18 more Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file... 7.5 High
- broadcom etrust antivirus, etrust intrusion detection, etrust secure content manager +16 more +18 more Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus... 7.5 High
- kaspersky lab anti-virus, archive zip zip, broadcom brightstor arcserve backup +16 more +18 more McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver... 7.5 High
- samba, conectiva linux, redhat enterprise linux +3 more +5 more The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote... 5.0 Medium
- vignette application portal The default installation of Vignette Application Portal installs the diagnostic utility without... 5.0 Medium
- samba, conectiva linux, redhat enterprise linux +3 more +5 more Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow... 10.0 High
- subversion, gentoo linux +1 more The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all... 5.0 Medium
- macromedia jrun, coldfusion +1 more Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such... 10.0 High
- distcc distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control... 7.5 High
- bnc, debian linux +1 more Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows... 10.0 High
- todd miller sudo, debian linux, mandrakesoft mandrake linux +3 more +5 more sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style... 7.2 High
- microsoft internet explorer, avaya definity one media server, ip600 media servers +4 more +6 more Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary... 10.0 High
- microsoft internet explorer, ie +1 more The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass... 2.6 Low
- ieee firewire ieee A design error in the IEEE1394 specification allows attackers with physical access to a device to... 7.2 High
- squirrelmail, gentoo linux +1 more Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in... 6.8 Medium
- imap proxy proxy Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select... 6.4 Medium
- xine gxine, gentoo linux, kaffeine player +2 more Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in... 10.0 High
- arjsoftware unarj, debian linux +1 more Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote... 5.0 Medium
- microsoft isa server, proxy server, windows 2003 server +2 more Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business... 7.5 High
- imagemagick, debian linux +1 more Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers... 10.0 High
- phpbb group phpbb viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when... 7.5 High
- angus mackay ez-ipupdate, debian linux +1 more Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when... 10.0 High
- info-zip zip Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder... 10.0 High
- yukihiro matsumoto ruby, gentoo linux, mandrakesoft mandrake linux +1 more +3 more The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a... 5.0 Medium
- bogofilter email filter, ubuntu linux +1 more The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a... 5.0 Medium
- trend micro scanmail domino Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the... 5.0 Medium
- samba ppp, canonical ubuntu linux +1 more Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of... 7.5 High
- debian shadow Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions... 4.6 Medium
- Show olderLoading…