İçeriğe atla
Noroxi

Yayın tarihine göre

Ocak 2005: sömürülen ve yeni ciddi CVE kayıtları

53 kayıt · 0 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2004-0568
    51Planlayın

    HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a v

    KritikCVSS 10,0İstismar yokEPSS %35

    microsoft · windows 200010 Oca 2005

  • CVE-2004-0571
    49Planlayın

    Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %30

    microsoft · windows 200010 Oca 2005

  • CVE-2004-0899
    42Planlayın

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly valida

    OrtaCVSS 5,0İstismar yokEPSS %72

    microsoft · windows nt10 Oca 2005

  • CVE-2004-0900
    48Planlayın

    The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain mes

    KritikCVSS 10,0İstismar yokEPSS %26

    microsoft · windows nt10 Oca 2005

  • CVE-2004-0901
    50Planlayın

    Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows r

    KritikCVSS 10,0İstismar yokEPSS %31

    microsoft · windows 200010 Oca 2005

  • CVE-2004-0946
    43Planlayın

    rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads

    KritikCVSS 10,0İstismar yokEPSS %11

    nfs · nfs-utils10 Oca 2005

  • CVE-2004-0953
    43Planlayın

    Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (appli

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    jabber software foundation · jabber server10 Oca 2005

  • CVE-2004-0993
    43Planlayın

    Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · sockd10 Oca 2005

  • CVE-2004-1018
    45Planlayın

    Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execut

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    php · php10 Oca 2005

  • CVE-2004-1065
    43Planlayın

    Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary cod

    KritikCVSS 10,0İstismar yokEPSS %10

    php · php10 Oca 2005

  • CVE-2004-1080
    64Bu hafta

    The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to writ

    KritikCVSS 10,0SilahlaştırılmışEPSS %79

    microsoft · windows 200010 Oca 2005

  • CVE-2004-1096
    36İzleyin

    Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus prote

    YüksekCVSS 7,5Kavram kanıtıEPSS %18

    broadcom · brightstor arcserve backup10 Oca 2005

  • CVE-2004-1099
    43Planlayın

    Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.

    KritikCVSS 10,0İstismar yokEPSS %10

    cisco · secure access control server10 Oca 2005

  • CVE-2004-1119
    45Planlayın

    Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute ar

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    nullsoft · winamp10 Oca 2005

  • CVE-2004-1120
    44Planlayın

    Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    prozilla · prozilla download accelerator10 Oca 2005

  • CVE-2004-1127
    44Planlayın

    Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectA

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    open dc hub · direct connect peer-to-peer client10 Oca 2005

  • CVE-2004-1134
    62Bu hafta

    Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    microsoft · w3who.dll10 Oca 2005

  • CVE-2004-1135
    40Planlayın

    Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1)

    OrtaCVSS 5,0SilahlaştırılmışEPSS %49

    ipswitch · ws ftp server10 Oca 2005

  • CVE-2004-1137
    46Planlayın

    Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers t

    KritikCVSS 10,0Kavram kanıtıEPSS %20

    linux · linux kernel10 Oca 2005

  • CVE-2004-1147
    43Planlayın

    phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary c

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    phpmyadmin · phpmyadmin10 Oca 2005

  • CVE-2004-1154
    44Planlayın

    Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of serv

    KritikCVSS 10,0İstismar yokEPSS %13

    samba · samba10 Oca 2005

  • CVE-2004-1170
    45Planlayın

    a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.

    KritikCVSS 10,0Kavram kanıtıEPSS %15

    gnu · a2ps10 Oca 2005

  • CVE-2004-1172
    65Bu hafta

    Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, a

    KritikCVSS 10,0SilahlaştırılmışEPSS %81

    symantec veritas · backup exec10 Oca 2005

  • CVE-2004-1192
    44Planlayın

    Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via for

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    citadel · ux10 Oca 2005

  • CVE-2004-1211
    62Bu hafta

    Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    david harris · mercury10 Oca 2005

  • CVE-2004-1254
    43Planlayın

    WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long f

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    rarlab · winrar10 Oca 2005

  • CVE-2004-1256
    43Planlayın

    Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute ar

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    abcmidi · abcmidi10 Oca 2005

  • CVE-2004-1260
    43Planlayın

    Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow re

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    abctab2ps · abctab2ps10 Oca 2005

  • CVE-2004-1284
    44Planlayın

    Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafte

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    mpg123 · mpg12310 Oca 2005

  • CVE-2004-1286
    44Planlayın

    Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to ex

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    napshare · napshare10 Oca 2005

  • CVE-2004-1287
    45Planlayın

    Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    nasm · netwide assembler10 Oca 2005

  • CVE-2004-1288
    43Planlayın

    Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    siag · o3read10 Oca 2005

  • CVE-2004-1289
    44Planlayın

    Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remo

    KritikCVSS 10,0Kavram kanıtıEPSS %14

    pcal · pcal10 Oca 2005

  • CVE-2004-1292
    45Planlayın

    Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code vi

    KritikCVSS 10,0Kavram kanıtıEPSS %16

    michael kohn · ringtonetools10 Oca 2005

  • CVE-2004-1293
    44Planlayın

    Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a craft

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    rtf2latex2e · rtf2latex2e10 Oca 2005

  • CVE-2004-1299
    44Planlayın

    Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    vilistextum · vilistextum10 Oca 2005

  • CVE-2004-1304
    43Planlayın

    Stack-based buffer overflow in the ELF header parsing code in file before 4.12 allows attackers to execute arbitrary code via a crafted ELF

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    file · file10 Oca 2005

  • CVE-2004-1308
    44Planlayın

    Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a

    KritikCVSS 10,0İstismar yokEPSS %14

    libtiff · libtiff10 Oca 2005

  • CVE-2004-0897
    53Planlayın

    The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attack

    KritikCVSS 10,0İstismar yokEPSS %42

    microsoft · windows 2003 server11 Oca 2005

  • CVE-2005-0097
    23İzleyin

    The NTLM component in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via a malformed NTLM type 3

    OrtaCVSS 5,0İstismar yokEPSS %10

    squid · squid11 Oca 2005

  • CVE-2005-0095
    41Planlayın

    The WCCP message parsing code in Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (crash) via malformed WC

    OrtaCVSS 5,0İstismar yokEPSS %68

    squid · squid15 Oca 2005

  • CVE-2005-0116
    52Planlayın

    AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    awstats · awstats18 Oca 2005

  • CVE-2005-0566
    35İzleyin

    Buffer overflow in Golden FTP Server Pro (goldenftpd) 2.x allows remote attackers to execute arbitrary code via a long RNTO command.

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    kmint21 software · golden ftp server22 Oca 2005

  • CVE-2005-0308
    51Planlayın

    Buffer overflow in the wsprintf function in W32Dasm 8.93 and earlier allows remote attackers to execute arbitrary code via a large import or

    YüksekCVSS 7,5SilahlaştırılmışEPSS %68

    ursoftware · w32dasm24 Oca 2005

  • CVE-2004-0882
    44Planlayın

    Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a

    KritikCVSS 10,0İstismar yokEPSS %13

    samba · samba27 Oca 2005

  • CVE-2004-0892
    35İzleyin

    Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Pre

    YüksekCVSS 7,5İstismar yokEPSS %17

    microsoft · isa server27 Oca 2005

  • CVE-2004-0902
    43Planlayın

    Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow r

    KritikCVSS 10,0İstismar yokEPSS %10

    mozilla · mozilla27 Oca 2005

  • CVE-2004-0918
    25İzleyin

    The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a de

    OrtaCVSS 5,0İstismar yokEPSS %15

    squid · squid27 Oca 2005

  • CVE-2004-0932
    49Planlayın

    McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attac

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    ca · etrust antivirus27 Oca 2005

  • CVE-2004-0933
    36İzleyin

    Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure

    YüksekCVSS 7,5Kavram kanıtıEPSS %20

    ca · etrust antivirus27 Oca 2005

  • CVE-2004-0934
    34İzleyin

    Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    ca · etrust antivirus27 Oca 2005

  • CVE-2004-0935
    35İzleyin

    Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both lo

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    archive zip · archive zip27 Oca 2005

  • CVE-2004-0936
    34İzleyin

    RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, w

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    ca · etrust antivirus27 Oca 2005