CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2004(Overflow)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2005-0441 Exec Code Overflow 2004-12-22 2017-07-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or "sa" role privileges to execute arbitrary code via (5) a crafted install java statement.
2 CVE-2005-0373 Exec Code Overflow 2004-10-07 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
3 CVE-2005-0189 Exec Code Overflow 2004-10-06 2017-11-16
7.5
 User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.
4 CVE-2004-2731 189 Exec Code Overflow 2004-12-31 2008-09-05
4.4
 None Local Medium Not required Partial Partial Partial
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
5 CVE-2004-2728 119 DoS Overflow 2004-12-31 2017-07-28
3.5
 None Remote Medium Single system None None Partial
Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command.
6 CVE-2004-2727 119 DoS Overflow 2004-12-31 2017-07-28
4.3
 None Remote Medium Not required None None Partial
Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
7 CVE-2004-2719 119 Exec Code Overflow 2004-12-31 2017-10-10
6.8
 None Remote Medium Not required Partial Partial Partial
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339.
8 CVE-2004-2712 119 DoS Overflow 2004-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to "URL data."
9 CVE-2004-2711 119 DoS Exec Code Overflow 2004-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "avatar retrieval."
10 CVE-2004-2710 119 DoS Exec Code Overflow 2004-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name.
11 CVE-2004-2709 119 DoS Exec Code Overflow 2004-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags.
12 CVE-2004-2707 Overflow 2004-12-31 2017-07-28
7.5
 None Remote Low Not required Partial Partial Partial
Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses.
13 CVE-2004-2685 119 Exec Code Overflow 2004-12-31 2017-10-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416.
14 CVE-2004-2673 DoS Exec Code Overflow 2004-12-31 2017-07-28
9.0
 None Remote Low Single system Complete Complete Complete
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument.
15 CVE-2004-2654 DoS Overflow 2004-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference. NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.
16 CVE-2004-2614 DoS Exec Code Overflow 2004-12-31 2017-07-19
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
17 CVE-2004-2609 Overflow +Info 2004-12-31 2017-07-19
2.1
 None Local Low Not required Partial None None
The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.
18 CVE-2004-2599 DoS Overflow 2004-12-31 2017-07-10
2.1
 None Local Low Not required None None Partial
Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon.
19 CVE-2004-2593 DoS Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.
20 CVE-2004-2587 DoS Overflow 2004-12-31 2017-07-10
5.0
 None Remote Low Not required None None Partial
login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow.
21 CVE-2004-2571 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.
22 CVE-2004-2552 Exec Code Overflow 2004-12-31 2017-07-10
4.6
 User Local Low Not required Partial Partial Partial
Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability.
23 CVE-2004-2549 DoS Overflow 2004-12-31 2017-07-10
5.0
 None Remote Low Not required None None Partial
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
24 CVE-2004-2541 119 Exec Code Overflow 2004-12-31 2017-10-10
6.9
 None Local Medium Not required Complete Complete Complete
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
25 CVE-2004-2513 Exec Code Overflow 2004-12-31 2017-10-18
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.
26 CVE-2004-2501 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection.
27 CVE-2004-2490 Exec Code Overflow 2004-12-31 2017-07-10
4.6
 User Local Low Not required Partial Partial Partial
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.
28 CVE-2004-2466 119 1 DoS Overflow 2004-12-31 2017-10-18
5.0
 None Remote Low Not required None None Partial
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.
29 CVE-2004-2463 DoS Exec Code Overflow 2004-12-31 2018-08-13
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request.
30 CVE-2004-2461 DoS Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code.
31 CVE-2004-2433 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.
32 CVE-2004-2432 DoS Overflow 2004-12-31 2017-07-10
5.0
 None Remote Low Not required None None Partial
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow.
33 CVE-2004-2429 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary code via the (1) qmail_parseline and (2) sendmail_parseline functions in parser.c, (3) loadconfig and (4) removespaces functions in loadconfig.c, and possibly (5) unspecified functions in functions.c.
34 CVE-2004-2418 Exec Code Overflow 2004-12-31 2017-07-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.
35 CVE-2004-2416 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
36 CVE-2004-2409 Exec Code Overflow 2004-12-31 2017-07-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.
37 CVE-2004-2406 Overflow 2004-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact.
38 CVE-2004-2405 DoS Overflow Bypass 2004-12-31 2017-07-10
6.4
 None Remote Low Not required None Partial Partial
Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.
39 CVE-2004-2401 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."
40 CVE-2004-2387 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code.
41 CVE-2004-2376 DoS Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute.
42 CVE-2004-2375 DoS Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER command with a long second parameter (digest).
43 CVE-2004-2372 Exec Code Overflow 2004-12-31 2017-07-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path. NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability.
44 CVE-2004-2370 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name.
45 CVE-2004-2366 DoS Overflow 2004-12-31 2017-07-10
5.0
 None Remote Low Not required None None Partial
Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument.
46 CVE-2004-2312 Overflow +Priv 2004-12-31 2017-07-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
47 CVE-2004-2304 DoS Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
48 CVE-2004-2301 DoS Overflow 2004-12-31 2017-07-10
5.0
 None Remote Low Not required None None Partial
Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a buffer overflow.
49 CVE-2004-2300 Exec Code Overflow 2004-12-31 2017-07-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.
50 CVE-2004-2299 Exec Code Overflow 2004-12-31 2017-07-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header.
Total number of vulnerabilities : 410   Page : 1 (This Page)2 3 4 5 6 7 8 9
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.