CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8825  CVE-2004-0397  Candidate  Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.  Assigned (20040413)  None (candidate not yet proposed)    View
8824  CVE-2004-0396  Candidate  Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.  Assigned (20040413)  None (candidate not yet proposed)    View
8823  CVE-2004-0395  Candidate  The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.  Assigned (20040413)  None (candidate not yet proposed)    View
8822  CVE-2004-0394  Candidate  A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.  Assigned (20040413)  None (candidate not yet proposed)    View
8821  CVE-2004-0393  Candidate  Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.  Assigned (20040413)  None (candidate not yet proposed)    View

Page 19179 of 20943, showing 5 records out of 104715 total, starting on record 95891, ending on 95895

Actions