CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
8825 | CVE-2004-0397 | Candidate | Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8824 | CVE-2004-0396 | Candidate | Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8823 | CVE-2004-0395 | Candidate | The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8822 | CVE-2004-0394 | Candidate | A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic. | Assigned (20040413) | None (candidate not yet proposed) | View | |
8821 | CVE-2004-0393 | Candidate | Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function. | Assigned (20040413) | None (candidate not yet proposed) | View |
Page 19179 of 20943, showing 5 records out of 104715 total, starting on record 95891, ending on 95895