CVE Vulnerability Catalog

Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.

Vulnerability in MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning by sending an email attachment with a virus that contains an empty boundary string in the Content-Type header.

Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the module, action, or theme parameters to index.php, the theme parameter to Login.php, and possibly other parameters or scripts.

Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename. This affects multiple products including RealPlayer, CheckMark Software, dtSearch, McAfee VirusScan, and IBM Lotus Notes.

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.

The vulnerability in the argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via specially crafted commands such as "body[p", "binary[p", or "binary[p", which cause an index increment error leading to out-of-bounds memory corruption.

Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 contains a vulnerability that allows a remote attacker to write to arbitrary memory locations and potentially execute arbitrary code by sending a modified memory pointer in a WINS replication packet to TCP port 42. This vulnerability is known as the 'Association Context Vulnerability'.

The vulnerability in Cisco Secure Access Control Server for Windows and Solution Engine version 3.3.1, when EAP-TLS protocol is enabled, improperly handles expired or untrusted certificates. This allows a remote attacker to bypass authentication and gain unauthorized access using a cryptographically correct certificate with valid fields such as the username.

Buffer overflow vulnerability in the get_field_headers function in csv2xml.cpp of csv2xml version 0.5.1. A remote attacker can exploit a crafted CSV file to execute arbitrary code.

Multiple buffer overflows were found in the getline function in pcalutil.c and the get_holiday function in readfile.c in pcal 4.7.1. This vulnerability allows a remote attacker to execute arbitrary code via a crafted calendar file.

Buffer overflow vulnerability in the simplify_path function in config.c of ChBg 1.5. A remote attacker can execute arbitrary code via a crafted chbg scenario file.

A buffer overflow in the Mesh::type method in mesh.c of the mview program in Mesh Viewer 0.2.2 allows remote attackers to execute arbitrary code via crafted mesh files.

Buffer overflow vulnerability in the put_words function in subs.c of abcm2ps version 3.7.20. A remote attacker can execute arbitrary code via crafted ABC files.

A vulnerability in Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability, a different vulnerability than CVE-2004-1122.

An integer overflow in libtiff versions 3.5.7 and 3.7.0 in tif_dirread.c and tif_fax3.c allows remote attackers to execute arbitrary code via a crafted TIFF file with a TIFF_ASCII or TIFF_UNDEFINED directory entry having an entry count of -1, leading to a heap-based buffer overflow.

Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary code via a crafted gnutella response.

Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.

Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.

Multiple buffer overflows in ProZilla 1.3.6-r2 and earlier in files http.c, http-retr.c, main.c and other network protocol handling code allow remote servers to execute arbitrary code via a long Location header.