CVE Vulnerability Catalog

MAILsweeper for SMTP versions 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that is either (1) corrupt or (2) contains "embedded objects."

Buffer overflow in the IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.

Unspecified vulnerability in Phorum versions 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.

In OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and PAM keyboard-interactive authentication is used, there is no delay after a root login attempt with the correct password. This makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful.

KaZaA Media Desktop (KMD) version 2.0 launches advertisements in the Internet Explorer local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code.

CVE-2003-1533 describes an SQL injection vulnerability in accesscontrol.php in PhpPass 2 that allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.

Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service via a Short Message Service (SMS) message with a long image name.

A memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service by hanging an SMB request via a NetBIOS continuation packet.

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.

Sambar Server before version 6.0 beta 6 has a security vulnerability that allows remote attackers to send proxy HTTP requests to the server's administrative interface and external web servers if the security.ini file lacks a proxydeny entry for 127.0.0.1.

Epic Games Unreal Engine versions 226f through 436 are vulnerable to an attack that can lead to denial of service through CPU consumption or crash, and potentially execute arbitrary code. Attackers can exploit a packet with a negative size value, which is treated as a large positive number during memory allocation.

The vulnerability in guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

CVE-2003-1532 is an SQL injection vulnerability in compte.php in PhpMyShop 1.00 that allows remote attackers to execute arbitrary SQL commands via the identifiant and password parameters.

D-Forum versions 1.00 to 1.11 have a PHP remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via a crafted URL in the my_header or my_footer parameters.

CVE-2003-1530 is a SQL injection vulnerability in privmsg.php in phpBB version 2.0.3 and earlier. It allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.

The nsr_shutdown function in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file.

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.

PHP remote file inclusion vulnerability in hit.php for Kietu versions 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter.

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.

Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.