2004

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is

Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors,

GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SM

Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in

MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permission

Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or deter

IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log f

Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and

Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a

zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted mu

Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU

Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that

Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of

Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote

Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remot

Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spac

The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed

The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of ser

Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR

msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being do

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javasc

Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IF

A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been l

Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files vi

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP request

Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrativ

TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arg

The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one proc

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote au

Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform una

PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDia

The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files

load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary

The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink

The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on t

The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a

The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access

GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to caus

Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev

NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid poi

Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.

Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbit

TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlin

YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you

The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords