Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2004-12-31 CVE-2004-2259 Denial of Service vulnerability in Beasts Vsftpd 1.2.0/1.2.1
vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.
network
low complexity
beasts
5.0
2004-12-31 CVE-2004-2258 Unspecified vulnerability in Hummingbird Exceed 9.0
Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab.
local
low complexity
hummingbird
2.1
2004-12-31 CVE-2004-2256 Directory Traversal vulnerability in phpMyFAQ Lang Parameter
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via ..
network
low complexity
phpmyfaq
5.0
2004-12-31 CVE-2004-2255 Unspecified vulnerability in PHPmyfaq 1.3.12
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
network
low complexity
phpmyfaq
6.4
2004-12-31 CVE-2004-2254 Authentication Bypass vulnerability in SurgeLDAP Web Administration
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.
network
low complexity
netwin
7.5
2004-12-31 CVE-2004-2253 Directory Traversal vulnerability in Netwin Surgeldap 1.0D/1.0E/1.0G
Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a ..
network
low complexity
netwin
5.0
2004-12-31 CVE-2004-2251 Remote Security vulnerability in Security Linux
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks.
network
low complexity
astaro
5.0
2004-12-31 CVE-2004-2250 Remote Security vulnerability in Audienceconnect Remoteeditor
Unknown vulnerability in the "access code" in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.
network
low complexity
goosequill
7.5
2004-12-31 CVE-2004-2249 Remote Security vulnerability in Audienceconnect Secureeditor
Unknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.
network
low complexity
goosequill
7.5
2004-12-31 CVE-2004-2248 Remote Security vulnerability in Goosequill Remoteeditor 0.1.1
Unknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related to "oversize submissions."
network
low complexity
goosequill
critical
10.0