Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: январь 2005 г.

53 записей · 0 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2004-0568
    51В плане

    HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a v

    КритическаяCVSS 10,0Эксплойта нетEPSS 35 %

    microsoft · windows 200010 янв. 2005 г.

  • CVE-2004-0571
    49В плане

    Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary

    КритическаяCVSS 10,0Эксплойта нетEPSS 30 %

    microsoft · windows 200010 янв. 2005 г.

  • CVE-2004-0899
    42В плане

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly valida

    СредняяCVSS 5,0Эксплойта нетEPSS 72 %

    microsoft · windows nt10 янв. 2005 г.

  • CVE-2004-0900
    48В плане

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain mes

    КритическаяCVSS 10,0Эксплойта нетEPSS 26 %

    microsoft · windows nt10 янв. 2005 г.

  • CVE-2004-0901
    50В плане

    Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows r

    КритическаяCVSS 10,0Эксплойта нетEPSS 31 %

    microsoft · windows 200010 янв. 2005 г.

  • CVE-2004-0946
    43В плане

    rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads

    КритическаяCVSS 10,0Эксплойта нетEPSS 11 %

    nfs · nfs-utils10 янв. 2005 г.

  • CVE-2004-0953
    43В плане

    Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (appli

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    jabber software foundation · jabber server10 янв. 2005 г.

  • CVE-2004-0993
    43В плане

    Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    hp · sockd10 янв. 2005 г.

  • CVE-2004-1018
    45В плане

    Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execut

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    php · php10 янв. 2005 г.

  • CVE-2004-1065
    43В плане

    Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary cod

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    php · php10 янв. 2005 г.

  • CVE-2004-1080
    64На этой неделе

    The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to writ

    КритическаяCVSS 10,0Готовый эксплойтEPSS 79 %

    microsoft · windows 200010 янв. 2005 г.

  • CVE-2004-1096
    36Наблюдать

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote

    ВысокаяCVSS 7,5Proof of conceptEPSS 18 %

    broadcom · brightstor arcserve backup10 янв. 2005 г.

  • CVE-2004-1099
    43В плане

    Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    cisco · secure access control server10 янв. 2005 г.

  • CVE-2004-1119
    45В плане

    Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar

    КритическаяCVSS 10,0Proof of conceptEPSS 17 %

    nullsoft · winamp10 янв. 2005 г.

  • CVE-2004-1120
    44В плане

    Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    prozilla · prozilla download accelerator10 янв. 2005 г.

  • CVE-2004-1127
    44В плане

    Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectA

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    open dc hub · direct connect peer-to-peer client10 янв. 2005 г.

  • CVE-2004-1134
    62На этой неделе

    Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary

    КритическаяCVSS 10,0Готовый эксплойтEPSS 72 %

    microsoft · w3who.dll10 янв. 2005 г.

  • CVE-2004-1135
    40В плане

    Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1)

    СредняяCVSS 5,0Готовый эксплойтEPSS 49 %

    ipswitch · ws ftp server10 янв. 2005 г.

  • CVE-2004-1137
    46В плане

    Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers t

    КритическаяCVSS 10,0Proof of conceptEPSS 20 %

    linux · linux kernel10 янв. 2005 г.

  • CVE-2004-1147
    43В плане

    phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary c

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    phpmyadmin · phpmyadmin10 янв. 2005 г.

  • CVE-2004-1154
    44В плане

    Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of serv

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    samba · samba10 янв. 2005 г.

  • CVE-2004-1170
    45В плане

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    КритическаяCVSS 10,0Proof of conceptEPSS 15 %

    gnu · a2ps10 янв. 2005 г.

  • CVE-2004-1172
    65На этой неделе

    Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, a

    КритическаяCVSS 10,0Готовый эксплойтEPSS 81 %

    symantec veritas · backup exec10 янв. 2005 г.

  • CVE-2004-1192
    44В плане

    Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via for

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    citadel · ux10 янв. 2005 г.

  • CVE-2004-1211
    62На этой неделе

    Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application

    КритическаяCVSS 10,0Готовый эксплойтEPSS 72 %

    david harris · mercury10 янв. 2005 г.

  • CVE-2004-1254
    43В плане

    WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long f

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    rarlab · winrar10 янв. 2005 г.

  • CVE-2004-1256
    43В плане

    Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute ar

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    abcmidi · abcmidi10 янв. 2005 г.

  • CVE-2004-1260
    43В плане

    Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow re

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    abctab2ps · abctab2ps10 янв. 2005 г.

  • CVE-2004-1284
    44В плане

    Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafte

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    mpg123 · mpg12310 янв. 2005 г.

  • CVE-2004-1286
    44В плане

    Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to ex

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    napshare · napshare10 янв. 2005 г.

  • CVE-2004-1287
    45В плане

    Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a

    КритическаяCVSS 10,0Proof of conceptEPSS 17 %

    nasm · netwide assembler10 янв. 2005 г.

  • CVE-2004-1288
    43В плане

    Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW

    КритическаяCVSS 10,0Proof of conceptEPSS 10 %

    siag · o3read10 янв. 2005 г.

  • CVE-2004-1289
    44В плане

    Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remo

    КритическаяCVSS 10,0Proof of conceptEPSS 14 %

    pcal · pcal10 янв. 2005 г.

  • CVE-2004-1292
    45В плане

    Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code vi

    КритическаяCVSS 10,0Proof of conceptEPSS 16 %

    michael kohn · ringtonetools10 янв. 2005 г.

  • CVE-2004-1293
    44В плане

    Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a craft

    КритическаяCVSS 10,0Proof of conceptEPSS 13 %

    rtf2latex2e · rtf2latex2e10 янв. 2005 г.

  • CVE-2004-1299
    44В плане

    Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web

    КритическаяCVSS 10,0Proof of conceptEPSS 12 %

    vilistextum · vilistextum10 янв. 2005 г.

  • CVE-2004-1304
    43В плане

    Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF

    КритическаяCVSS 10,0Proof of conceptEPSS 11 %

    file · file10 янв. 2005 г.

  • CVE-2004-1308
    44В плане

    Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a

    КритическаяCVSS 10,0Эксплойта нетEPSS 14 %

    libtiff · libtiff10 янв. 2005 г.

  • CVE-2004-0897
    53В плане

    The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attack

    КритическаяCVSS 10,0Эксплойта нетEPSS 42 %

    microsoft · windows 2003 server11 янв. 2005 г.

  • CVE-2005-0097
    23Наблюдать

    The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    squid · squid11 янв. 2005 г.

  • CVE-2005-0095
    41В плане

    The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WC

    СредняяCVSS 5,0Эксплойта нетEPSS 68 %

    squid · squid15 янв. 2005 г.

  • CVE-2005-0116
    52В плане

    AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 74 %

    awstats · awstats18 янв. 2005 г.

  • CVE-2005-0566
    35Наблюдать

    Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    kmint21 software · golden ftp server22 янв. 2005 г.

  • CVE-2005-0308
    51В плане

    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 68 %

    ursoftware · w32dasm24 янв. 2005 г.

  • CVE-2004-0882
    44В плане

    Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a

    КритическаяCVSS 10,0Эксплойта нетEPSS 13 %

    samba · samba27 янв. 2005 г.

  • CVE-2004-0892
    35Наблюдать

    Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Pre

    ВысокаяCVSS 7,5Эксплойта нетEPSS 17 %

    microsoft · isa server27 янв. 2005 г.

  • CVE-2004-0902
    43В плане

    Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    mozilla · mozilla27 янв. 2005 г.

  • CVE-2004-0918
    25Наблюдать

    The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a de

    СредняяCVSS 5,0Эксплойта нетEPSS 15 %

    squid · squid27 янв. 2005 г.

  • CVE-2004-0932
    49В плане

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

    ВысокаяCVSS 7,5Proof of conceptEPSS 63 %

    ca · etrust antivirus27 янв. 2005 г.

  • CVE-2004-0933
    36Наблюдать

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure

    ВысокаяCVSS 7,5Proof of conceptEPSS 20 %

    ca · etrust antivirus27 янв. 2005 г.

  • CVE-2004-0934
    34Наблюдать

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    ca · etrust antivirus27 янв. 2005 г.

  • CVE-2004-0935
    35Наблюдать

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    archive zip · archive zip27 янв. 2005 г.

  • CVE-2004-0936
    34Наблюдать

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w

    ВысокаяCVSS 7,5Proof of conceptEPSS 14 %

    ca · etrust antivirus27 янв. 2005 г.