CVE Vulnerability Catalog

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.

Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before version 0.51 prevents proper detection of viruses in certain files such as .CAB or .ZIP files.

Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.

Vulnerability in xloadimage before version 4.1-r2 and xli before version 1.17 allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

A format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.

Multiple vulnerabilities in xli before version 1.17 due to buffer management errors when processing image properties, some related to integer overflows in PPM files, may allow remote attackers to execute arbitrary code.

A vulnerability in the scan.c file of the LibXPM library may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.

Buffer overflow vulnerability in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.

Vulnerability in iptables before version 1.2.11 causes required modules to not be properly loaded during system startup under certain conditions. As a result, firewall rules fail to load, exposing the system to remote attacks.

Multiple buffer overflows in libXML versions 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via a long FTP URL, a long proxy URL containing FTP data, and other overflows related to manipulation of DNS length values.

Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.

RaidenHTTPD 1.1.32 and possibly earlier versions before 1.1.34 contain a buffer overflow vulnerability. A remote attacker can exploit a long URL to execute arbitrary code on the server.

A format string vulnerability in the log functions of dhcpd in version 2.x allows remote DNS servers to execute arbitrary code via specially crafted DNS messages. This is a different vulnerability than CVE-2002-0702.

Vulnerability in sudo before version 1.6.8p2 allows local users to execute arbitrary commands by using '()' style environment variables to create functions with the same name as any program called within a bash script without using the full pathname.

Integer underflow in pppd (ppp 2.4.1) in cbcp.c allows a remote attacker to cause a denial of service (daemon crash) by sending a CBCP packet with an invalid length value, leading to access of an incorrect memory location.

Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.

Buffer overflow in the getnickuserhost function in BNC 2.8.9 (and possibly other versions) allows a remote IRC server to execute arbitrary code by sending a response containing many '!' or '@' characters.

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

Vulnerability in fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.

Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.