CVE List

Id CVE No. Status Description Phase Votes Comments Actions
8658  CVE-2004-0230  Candidate  TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.  Assigned (20040317)  None (candidate not yet proposed)    View
8659  CVE-2004-0231  Candidate  Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."  Assigned (20040317)  None (candidate not yet proposed)    View
8660  CVE-2004-0232  Candidate  Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.  Assigned (20040317)  None (candidate not yet proposed)    View
8661  CVE-2004-0233  Candidate  Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.  Assigned (20040317)  None (candidate not yet proposed)    View
8662  CVE-2004-0234  Candidate  Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.  Assigned (20040317)  None (candidate not yet proposed)    View

Page 20101 of 20943, showing 5 records out of 104715 total, starting on record 100501, ending on 100505

Actions