Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openpkg openpkg 2.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-0594
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote malicious users to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init func...
Openpkg Openpkg 2.0Trustix Secure Linux 2.0Hp Hp-ux B.11.23Openpkg Openpkg 2.1Hp Hp-ux B.11.11Avaya Converged Communications Server 2.0Trustix Secure Linux 1.5Hp Hp-ux B.11.00Trustix Secure Linux 2.1Debian Debian Linux 3.0Hp Hp-ux B.11.22Php Php 5.0.0Php Php
NA
CVE-2004-0918
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache prior to 2.4.STABLE7 allows remote malicious users to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
Openpkg Openpkg 2.1Openpkg Openpkg 2.2Squid Squid 2.4 .stable2Squid Squid 2.4 .stable6Squid Squid 3.0 Pre2Squid Squid 3.0 Pre3Openpkg Openpkg CurrentSquid Squid 2.0 Patch2Squid Squid 2.4 .stable7Squid Squid 2.5 .stable1Squid Squid 2.5 .stable3Squid Squid 2.3 .stable5Squid Squid 2.4Squid Squid 2.5 .stable6Squid Squid 3.0 Pre1Squid Squid 2.1 Patch2Squid Squid 2.3 .stable4Squid Squid 2.5 .stable4Squid Squid 2.5 .stable5Ubuntu Ubuntu Linux 4.1Gentoo LinuxTrustix Secure Linux 2.0
7.8
CVSSv3
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
Openpkg Openpkg 2.0Openpkg Openpkg 2.1Openpkg Openpkg 2.2Apache Http ServerSlackware Slackware Linux 9.0Slackware Slackware Linux 8.1Slackware Slackware Linux 10.0Hp Hp-ux 11.11Suse Suse Linux 9.2Suse Suse Linux 9.0Slackware Slackware Linux 8.0Suse Suse Linux 8.2Slackware Slackware Linux 9.1Slackware Slackware Linux CurrentSuse Suse Linux 8.0Trustix Secure Linux 1.5Hp Hp-ux 11.00Hp Hp-ux 11.22Suse Suse Linux 9.1Hp Hp-ux 11.20Suse Suse Linux 8.1
NA
CVE-2004-0990
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in...
Gd Graphics Library Gdlib 1.8.4Gd Graphics Library Gdlib 2.0.26Gd Graphics Library Gdlib 2.0.27Gd Graphics Library Gdlib 2.0.28Gd Graphics Library Gdlib 2.0.1Gd Graphics Library Gdlib 2.0.15Openpkg Openpkg 2.1Openpkg Openpkg 2.2Gd Graphics Library Gdlib 2.0.20Gd Graphics Library Gdlib 2.0.21Openpkg Openpkg CurrentGd Graphics Library Gdlib 2.0.22Gd Graphics Library Gdlib 2.0.23Suse Suse Linux 8.1Suse Suse Linux 8.2Trustix Secure Linux 2.1Trustix Secure Linux 2.2Suse Suse Linux 9.0Suse Suse Linux 9.1Suse Suse Linux 9.2Gentoo LinuxSuse Suse Linux 8.0
NA
CVE-2004-0421
The Portable Network Graphics library (libpng) 1.0.15 and previous versions allows malicious users to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
Openpkg Openpkg 2.0Libpng Libpng 1.2.2Libpng Libpng 1.0.8Libpng Libpng 1.2.4Libpng Libpng 1.0.14Libpng Libpng 1.2.0Openpkg Openpkg 1.3Libpng Libpng 1.0.11Libpng Libpng 1.0.9Libpng Libpng 1.0.13Libpng Libpng 1.0.6Libpng Libpng 1.0.7Libpng Libpng 1.2.3Libpng Libpng 1.0.5Libpng Libpng 1.2.1Redhat Libpng 1.2.2-16Libpng Libpng 1.0.12Libpng Libpng 1.2.5Libpng Libpng 1.0.0Redhat Libpng 1.2.2-20Libpng Libpng 1.0.10Trustix Secure Linux 2.0
9.8
CVSSv3
CVE-2004-0772
Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and previous versions may allow remote malicious users to execute arbitrary code.
Mit Kerberos 5Openpkg Openpkg 2.0Openpkg Openpkg 2.1Debian Debian Linux 3.0
NA
CVE-2004-1019
The deserialization code in PHP prior to 4.3.10 and PHP 5.x up to 5.0.2 allows remote malicious users to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative ref...
Openpkg Openpkg 2.2Openpkg Openpkg CurrentPhp Php 3.0.14Php Php 3.0.15Php Php 3.0.5Php Php 3.0.6Php Php 3.0.7Php Php 4.0.2Php Php 4.0.3Php Php 4.0.7Php Php 4.2.3Php Php 4.2Php Php 4.3.0Php Php 4.3.7Php Php 4.3.8Php Php 5.0Php Php 3.0.10Php Php 3.0.11Php Php 3.0.18Php Php 3.0.2Php Php 4.0Php Php 4.0.1
NA
CVE-2004-1065
Buffer overflow in the exif_read_data function in PHP prior to 4.3.10 and PHP 5.x up to 5.0.2 allows remote malicious users to execute arbitrary code via a long section name in an image file.
Openpkg Openpkg 2.1Php Php 3.0.12Php Php 3.0.13Php Php 3.0Php Php 3.0.1Php Php 3.0.16Php Php 3.0.17Php Php 3.0.8Php Php 3.0.9Php Php 4.0.3Php Php 4.0.4Php Php 4.1.0Php Php 4.1.1Php Php 4.3.1Php Php 4.3.2Php Php 4.3.9Php Php 5.0.0Php Php 3.0.4Php Php 3.0.5Php Php 4.0.1Php Php 4.0.7Php Php 4.2.2
NA
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and previous versions, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activitie...
Oracle Mysql 3.21Oracle Mysql 3.22Oracle Mysql 3.23Oracle Mysql 3.23.10Oracle Mysql 3.23.27Oracle Mysql 3.23.28Oracle Mysql 3.23.34Oracle Mysql 3.23.36Oracle Mysql 3.23.42Oracle Mysql 3.23.43Oracle Mysql 3.23.5Oracle Mysql 3.23.50Oracle Mysql 3.23.56Oracle Mysql 3.23.58Oracle Mysql 4.0.11Oracle Mysql 4.0.20Oracle Mysql 4.0.3Oracle Mysql 3.22.28Oracle Mysql 3.22.29Oracle Mysql 3.23.23Oracle Mysql 3.23.24Oracle Mysql 3.23.3
NA
CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 up to and including 2.2.8, with the imapmagicplus option enabled, allows remote malicious users to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.4Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Conectiva Linux 9.0Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaOpenpkg Openpkg CurrentConectiva Linux 10.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0Ubuntu Ubuntu Linux 4.1Trustix Secure Linux 2.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook