Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2004-08-06 CVE-2004-0551 Denial-Of-Service vulnerability in Cisco Catalyst 4500
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
network
low complexity
cisco
5.0
2004-08-06 CVE-2004-0547 Unspecified vulnerability in Postgresql 7.2.1
Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).
network
low complexity
postgresql
5.0
2004-08-06 CVE-2004-0537 Unspecified vulnerability in Opera Browser
Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.
network
low complexity
opera
5.0
2004-08-06 CVE-2004-0528 Unspecified vulnerability in Netscape Navigator 7.1
Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
network
low complexity
netscape
5.0
2004-08-06 CVE-2004-0527 Unspecified vulnerability in KDE Konqueror
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
network
low complexity
kde
5.0
2004-08-06 CVE-2004-0526 Unspecified vulnerability in Microsoft products
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
network
low complexity
microsoft
5.0
2004-08-06 CVE-2004-0525 Remote Denial of Service vulnerability in HP Integrated Lights Out
HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.
network
low complexity
hp
5.0
2004-08-06 CVE-2004-0417 Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
network
low complexity
cvs openpkg sgi gentoo openbsd
5.0
2004-08-06 CVE-2004-0215 Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
network
low complexity
avaya microsoft
5.0
2004-08-06 CVE-2004-0202 Remote Malformed Packet Denial Of Service vulnerability in Microsoft DirectX DirectPlay
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
network
low complexity
microsoft
5.0