Page 4 of 36 results (0.003 seconds)

CVSS: 7.8EPSS: 4%CPEs: 21EXPL: 3

CVE-2004-0940 – Apache 1.3.31 mod_include - Local Buffer Overflow

https://notcve.org/view.php?id=CVE-2004-0940

26 Oct 2004 — Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error. • https://www.exploit-db.com/exploits/587 • CWE-131: Incorrect Calculation of Buffer Size •

CVSS: 7.5EPSS: 68%CPEs: 26EXPL: 0

CVE-2004-0918 – Squid SNMP DoS

https://notcve.org/view.php?id=CVE-2004-0918

21 Oct 2004 — The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error. • ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 99EXPL: 0

CVE-2004-0957

https://notcve.org/view.php?id=CVE-2004-0957

21 Oct 2004 — Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 •

CVSS: 10.0EPSS: 0%CPEs: 74EXPL: 13

CVE-2000-0844 – Immunix OS 6.2 - LC glibc format string

https://notcve.org/view.php?id=CVE-2000-0844

14 Nov 2000 — Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. • https://www.exploit-db.com/exploits/20187 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

CVE-2000-0867

https://notcve.org/view.php?id=CVE-2000-0867

14 Nov 2000 — Kernel logging daemon (klogd) in Linux does not properly cleanse user-injected format strings, which allows local users to gain root privileges by triggering malformed kernel messages. • ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2000-032.0.txt •

CVSS: 10.0EPSS: 34%CPEs: 32EXPL: 5

CVE-2000-0666 – Conectiva 4.x/5.x / Debian 2.x / RedHat 6.x / S.u.S.E 6.x/7.0 / Trustix 1.x - rpc.statd Remote Format String

https://notcve.org/view.php?id=CVE-2000-0666

16 Jul 2000 — rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. • https://www.exploit-db.com/exploits/20075 •