CVSS: 7.5EPSS: 2%CPEs: 3EXPL: 0CVE-2004-0419
https://notcve.org/view.php?id=CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions. XDM en XFree86 abre una un socket TCP chooserFd incluso cuando DisplayManger.requestPort es 0, lo que podría permitir a atacantes remotos conectar al puerto, violando las restricciones pretendidas. • http://bugs.xfree86.org/show_bug.cgi?id=1376 http://secunia.com/advisories/12019 http://securitytracker.com/id?1010306 http://www.ciac.org/ciac/bulletins/p-001.shtml http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073 http://www.openbsd.org/errata.html#xdm http://www.redhat.com/support/errata/RHSA-2004-478.html http://www.securityfocus.com/bid/10423 https://bugzilla.redhat.com/bugz •
CVSS: 7.5EPSS: 8%CPEs: 7EXPL: 0CVE-2004-0093
https://notcve.org/view.php?id=CVE-2004-0093
XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI). XFree86 4.1.0 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante un índice de un array fuera de límites cuando usa la extenesión GLX y la infraestructura Direct Rendering • ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824 http://www.debian.org/security/2004/dsa-443 http://www.redhat.com/support/errata/RHSA-2004-152.html http://www.securityfocus.com/bid/9701 https://exchange.xforce.ibmcloud.com/vulnerabilities/15272 https://access.redhat.com/security/cve/CVE-2004-0093 https://bugzilla.redhat.com/show_bug.cgi?id=1617146 •
CVSS: 7.5EPSS: 8%CPEs: 7EXPL: 0CVE-2004-0094
https://notcve.org/view.php?id=CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI). Errores de falta de signo en enteros en XFree86 4.1.0 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario cuando se usa la extensión GLX y la infraestructura Direct Rendering • ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824 http://www.debian.org/security/2004/dsa-443 http://www.redhat.com/support/errata/RHSA-2004-152.html http://www.securityfocus.com/bid/9701 https://exchange.xforce.ibmcloud.com/vulnerabilities/15273 https://access.redhat.com/security/cve/CVE-2004-0094 https://bugzilla.redhat.com/show_bug.cgi?id=1617147 •
CVSS: 7.2EPSS: 0%CPEs: 9EXPL: 0CVE-2004-0106
https://notcve.org/view.php?id=CVE-2004-0106
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084. Múltiples vulnerabilidades desconocidas en XFree86 4.1.0 to 4.3.0 relacionadas con el manejo inapropiado de ficheros de fuentes, un grupo de vulnerabilidades diferente de CAN-2004-0083. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 http://marc.info/?l=bugtraq&m=110979666528890&w=2 http://www.debian.org/security/2004/dsa-443 http://www.mandriva.com/security/advisories?name=MDKSA-2004:012 http://www.novell.com/linux/security/advisories/2004_06_xf86.html http://www.redhat.com/support/errata/RHSA-2004-059.html http://www.redhat.com/support/errata/RHSA-2004-060.html http://www.redhat.com/support/errata/RHSA-2004-061.html http://w •
CVSS: 10.0EPSS: 10%CPEs: 9EXPL: 2CVE-2004-0084 – XFree86 4.x - CopyISOLatin1Lowered Font_Name Buffer Overflow
https://notcve.org/view.php?id=CVE-2004-0084
Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106. Desbordamiento de búfer en la función ReadFontAlias en XFree86 4.1.0 a 4.3.0, cuando se usa la función CopyISOLatin1Lowered, permite a usuarios locales o remotos autenticados ejecutar código arbitrario mediante una entrada malformada en el fichero de aliases de fuentes (font.alias), una vulnerabilidad distinta de CAN-2004-0083 y CAN-2004-0106. • https://www.exploit-db.com/exploits/23690 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821 http://marc.info/?l=bugtraq&m=107662833512775&w=2 http://marc.info/?l=bugtraq&m=110979666528890&w=2 http://sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1 http://www.debian.org/security/2004/dsa-443 http://www.idefense.com/application/poi/display? •