Security Vulnerabilities Published In July 2004

2004 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2003-1048	119		DoS Overflow	2004-07-27	2021-07-23	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
2	CVE-2004-0397			Exec Code Overflow	2004-07-07	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
3	CVE-2004-0398	787		Exec Code Overflow	2004-07-07	2020-10-09	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
4	CVE-2004-0399			DoS Exec Code Overflow	2004-07-07	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
5	CVE-2004-0400			DoS Exec Code Overflow	2004-07-07	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
6	CVE-2004-0401				2004-07-07	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
7	CVE-2004-0402			Exec Code Overflow	2004-07-07	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
8	CVE-2004-0404				2004-07-07	2017-07-11	1.2	None	Local	High	Not required	None	Partial	None
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
9	CVE-2004-0411	20		Exec Code	2004-07-07	2022-02-28	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.
10	CVE-2004-0420			Exec Code	2004-07-07	2021-07-23	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
11	CVE-2004-0422				2004-07-07	2017-07-11	2.1	None	Local	Low	Not required	None	Partial	None
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
12	CVE-2004-0423				2004-07-07	2016-10-18	2.1	None	Local	Low	Not required	None	Partial	None
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
13	CVE-2004-0424			DoS Exec Code Overflow	2004-07-07	2018-05-03	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.
14	CVE-2004-0426				2004-07-07	2017-10-11	5.0	None	Remote	Low	Not required	None	Partial	None
rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.
15	CVE-2004-0427			DoS	2004-07-07	2018-05-03	2.1	None	Local	Low	Not required	None	None	Partial
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
16	CVE-2004-0430			Exec Code Overflow	2004-07-07	2017-07-11	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
17	CVE-2004-0431			Exec Code Overflow	2004-07-07	2017-07-11	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
18	CVE-2004-0434	787		Exec Code Overflow	2004-07-07	2020-11-16	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
19	CVE-2004-0437			DoS	2004-07-07	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.
20	CVE-2004-0444			DoS Exec Code Overflow	2004-07-07	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
21	CVE-2004-0445			DoS	2004-07-07	2017-07-11	2.6	None	Remote	High	Not required	None	None	Partial
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
22	CVE-2004-0459			DoS	2004-07-07	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.
23	CVE-2004-0469			Exec Code Overflow	2004-07-07	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
24	CVE-2004-0470				2004-07-07	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.
25	CVE-2004-0471			DoS	2004-07-07	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).
26	CVE-2004-0473	88			2004-07-07	2022-02-28	2.6	None	Remote	High	Not required	None	Partial	None
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.
27	CVE-2004-0474				2004-07-07	2017-07-11	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
28	CVE-2004-0475				2004-07-07	2017-07-11	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap CVE-2003-1041.
29	CVE-2004-0478	399		DoS	2004-07-07	2017-07-11	2.6	None	Remote	High	Not required	None	None	Partial
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
30	CVE-2004-0479			DoS	2004-07-07	2016-10-18	5.0	None	Remote	Low	Not required	None	None	Partial
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.
31	CVE-2004-0482			Overflow	2004-07-07	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.
32	CVE-2004-0483			DoS	2004-07-07	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.
33	CVE-2004-0484			DoS	2004-07-07	2021-07-23	2.6	None	Remote	High	Not required	None	None	Partial
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.
34	CVE-2004-0485				2004-07-07	2017-07-11	5.0	None	Remote	Low	Not required	None	Partial	None
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
35	CVE-2004-0486			Exec Code Dir. Trav.	2004-07-07	2017-07-11	7.6	None	Remote	High	Not required	Complete	Complete	Complete
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
36	CVE-2004-0488			Exec Code Overflow	2004-07-07	2021-06-06	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
37	CVE-2004-0489			Exec Code	2004-07-07	2017-07-11	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.
38	CVE-2004-0566			Exec Code Overflow	2004-07-27	2021-07-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
39	CVE-2004-0594			Exec Code	2004-07-27	2018-10-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
40	CVE-2004-0595			XSS	2004-07-27	2018-10-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
41	CVE-2004-0600			Exec Code Overflow	2004-07-27	2017-10-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
42	CVE-2004-0632			Exec Code Overflow	2004-07-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
43	CVE-2004-0686			Overflow	2004-07-27	2018-10-30	5.0	None	Remote	Low	Not required	None	Partial	None
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
44	CVE-2004-0695			Exec Code Overflow	2004-07-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.
45	CVE-2004-0696				2004-07-27	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
46	CVE-2004-0697			+Info	2004-07-27	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.
47	CVE-2004-0698				2004-07-27	2017-07-11	3.6	None	Local	Low	Not required	Partial	Partial	None
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
48	CVE-2004-0700		1		2004-07-27	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
49	CVE-2004-0701				2004-07-27	2017-07-11	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.
50	CVE-2004-0702				2004-07-27	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.

Total number of vulnerabilities : 101 Page : 1 (This Page)2 3