CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In April 2004

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2002-1576 +Priv 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
2 CVE-2002-1577 +Priv 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
3 CVE-2002-1578 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
4 CVE-2002-1579 DoS 2004-04-15 2017-07-11
5.0
 None Remote Low Not required None None Partial
SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
5 CVE-2003-0202 2004-04-15 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
6 CVE-2003-0257 +Priv 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges.
7 CVE-2003-0513 Dir. Trav. Bypass 2004-04-15 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
8 CVE-2003-0514 Dir. Trav. Bypass 2004-04-15 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
9 CVE-2003-0592 Dir. Trav. Bypass 2004-04-15 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
10 CVE-2003-0593 22 Dir. Trav. Bypass 2004-04-15 2022-03-01
7.5
 None Remote Low Not required Partial Partial Partial
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
11 CVE-2003-0594 Dir. Trav. Bypass 2004-04-15 2017-10-11
7.5
 None Remote Low Not required Partial Partial Partial
Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
12 CVE-2003-0905 DoS 2004-04-15 2018-10-12
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets.
13 CVE-2003-1033 +Priv 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program.
14 CVE-2003-1034 +Priv 2004-04-15 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs.
15 CVE-2003-1035 Bypass 2004-04-15 2018-10-19
7.5
 None Remote Low Not required Partial Partial Partial
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does.
16 CVE-2003-1036 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header.
17 CVE-2003-1037 Exec Code 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high "trace level."
18 CVE-2003-1038 +Info 2004-04-15 2017-07-11
5.0
 None Remote Low Not required Partial None None
The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames.
19 CVE-2003-1039 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server.
20 CVE-2003-1040 DoS 2004-04-15 2018-08-13
2.1
 None Local Low Not required None None Partial
kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod.
21 CVE-2004-0107 2004-04-15 2017-10-11
4.6
 None Local Low Not required Partial Partial Partial
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
22 CVE-2004-0108 2004-04-15 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
23 CVE-2004-0111 DoS 2004-04-15 2017-10-10
5.0
 None Remote Low Not required None None Partial
gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.
24 CVE-2004-0121 Exec Code 2004-04-15 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
25 CVE-2004-0122 2004-04-15 2018-10-12
5.0
 None Remote Low Not required Partial None None
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.
26 CVE-2004-0148 Bypass 2004-04-15 2018-05-03
7.2
 None Local Low Not required Complete Complete Complete
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
27 CVE-2004-0150 Exec Code Overflow 2004-04-15 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
28 CVE-2004-0151 Exec Code 2004-04-15 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.
29 CVE-2004-0152 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames.
30 CVE-2004-0153 Exec Code 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.
31 CVE-2004-0173 Dir. Trav. 2004-04-15 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
32 CVE-2004-0217 2004-04-15 2017-07-11
3.7
 None Local High Not required Partial Partial Partial
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
33 CVE-2004-0224 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."
34 CVE-2004-0362 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
35 CVE-2004-0363 Exec Code Overflow 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.
36 CVE-2004-0364 2004-04-15 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
37 CVE-2004-0372 2004-04-15 2017-07-11
2.1
 None Local Low Not required None Partial None
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
38 CVE-2004-1060 DoS 2004-04-12 2018-10-19
5.0
 None Remote Low Not required None None Partial
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
39 CVE-2004-1077 2004-04-26 2008-09-05
5.0
 None Remote Low Not required None Partial None
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.
40 CVE-2004-1078 Exec Code Overflow 2004-04-26 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.
41 CVE-2004-1355 DoS 2004-04-26 2018-10-30
2.1
 None Local Low Not required None None Partial
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
42 CVE-2004-1356 DoS 2004-04-23 2018-10-30
2.1
 None Local Low Not required None None Partial
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
43 CVE-2004-1357 2004-04-07 2017-10-11
5.0
 None Remote Low Not required None Partial None
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.
44 CVE-2004-1756 2004-04-13 2017-07-11
5.0
 None Remote Low Not required None Partial None
BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers.
45 CVE-2004-1758 +Priv 2004-04-13 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.
46 CVE-2004-1890 DoS 2004-04-02 2017-07-11
5.0
 None Remote Low Not required None None Partial
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.
47 CVE-2004-1915 Exec Code Overflow 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
48 CVE-2004-1916 Exec Code Overflow 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
49 CVE-2004-1917 Exec Code 2004-04-08 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.
50 CVE-2004-1918 DoS 2004-04-09 2017-07-11
5.0
 None Remote Low Not required None None Partial
RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly.
Total number of vulnerabilities : 107   Page : 1 (This Page)2 3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.