Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2004-12-31 | CVE-2004-2302 | Local Integer Overflow vulnerability in Linux Kernel 2.6.10 Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files. | 2.6 |
| 2004-12-31 | CVE-2004-2301 | Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a buffer overflow. | 5.0 |
| 2004-12-31 | CVE-2004-2300 | Local Buffer Overflow vulnerability in UCD-SNMPD Command Line Parsing Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. | 7.2 |
| 2004-12-31 | CVE-2004-2299 | Buffer Overflow vulnerability in Omnicron OmniHTTPD Get Request Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header. | 7.5 |
| 2004-12-31 | CVE-2004-2298 | Denial-Of-Service vulnerability in Internet Messaging System Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator. | 6.4 |
| 2004-12-31 | CVE-2004-2297 | Input Validation vulnerability in PHP-Nuke The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter. | 5.0 |
| 2004-12-31 | CVE-2004-2296 | Input Validation vulnerability in PHP-Nuke The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message. | 5.0 |
| 2004-12-31 | CVE-2004-2295 | Input Validation vulnerability in PHP-Nuke SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter. | 7.5 |
| 2004-12-31 | CVE-2004-2294 | Input Validation vulnerability in PHP-Nuke Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability. network francisco-burzi | 4.3 |
| 2004-12-31 | CVE-2004-2293 | Input Validation vulnerability in PHP-Nuke Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter. network francisco-burzi | 4.3 |