Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter. Date published : 2004-07-13...
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name. Date published : 2004-07-13 http://www.securityfocus.com/bid/10615 http://marc.info/?l=bugtraq&m=108844316930791&w=2
Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via...
Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the...
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections. Date published : 2004-07-13 http://www.pureftpd.org/ http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file. Date published : 2004-07-13 http://www.securityfocus.com/bid/10644 http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause...
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users...
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing...
Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang). Date published : 2004-07-13 http://www.securityfocus.com/bid/10301 http://www.kb.cert.org/vuls/id/118558
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. Date published : 2004-07-13 http://www.securityfocus.com/bid/10639 http://www.kb.cert.org/vuls/id/718896
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code. Date published : 2004-07-13 http://marc.info/?l=bugtraq&m=108640917925735&w=2 http://www.debian.org/security/2004/dsa-530
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol. Date published : 2004-07-13 http://marc.info/?l=bugtraq&m=108938712815719&w=2 http://www.kb.cert.org/vuls/id/927014
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file. Date published : 2004-07-13 http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080