CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8710  CVE-2004-0282  Candidate  Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.  Modified (20050518)  NOOP(4) Armstrong, Cole, Cox, Wall    View
8709  CVE-2004-0281  Candidate  Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.  Proposed (20040318)  NOOP(4) Armstrong, Cole, Cox, Wall    View
8708  CVE-2004-0280  Candidate  Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.  Proposed (20040318)  ACCEPT(1) Cole | NOOP(3) Armstrong, Cox, Wall    View
8707  CVE-2004-0279  Candidate  AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.  Proposed (20040318)  NOOP(4) Armstrong, Cole, Cox, Wall    View
8706  CVE-2004-0278  Candidate  Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.  Proposed (20040318)  NOOP(4) Armstrong, Cole, Cox, Wall    View

Page 19202 of 20943, showing 5 records out of 104715 total, starting on record 96006, ending on 96010

Actions