CVE Vulnerability Catalog

Buffer overflow in the setupterm function of the lanadmin and landiag programs in HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable.

Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP versions 1.1.4-b1 through 1.1.4-b3 allow local users to execute arbitrary code.

SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allow remote attackers to execute arbitrary code via format string specifiers in syslog.

There is an off-by-one buffer overflow in spamc of SpamAssassin versions 2.40 through 2.43 when using BSMTP mode ('-B'). This allows remote attackers to execute arbitrary code via emails containing headers with leading '.' characters.

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before version 3.9 allows remote attackers to execute arbitrary SQL commands.

Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.

Origo ASR-8100 ADSL Router version 3.21 has an administration service running on port 254 that does not require a password. This allows remote attackers to cause a denial of service by restoring factory defaults.

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a newline character.

The SIP implementation in Columbia SIP User Agent (sipc) 1.74 and earlier versions before sipc 2.0 build 2003-02-21 is vulnerable to remote attacks. Attackers can cause denial of service or execute arbitrary code via crafted INVITE messages.

A stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon versions 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.

The rlm_smb module in FreeRADIUS 0.9.3 and earlier has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long User-Password attribute.

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.

Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.

SAP DB versions before 7.4.03.30 install several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases.

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ';' (semicolon) characters in escape sequences, leading to a buffer overflow.

PeopleSoft PeopleTools versions 8.1x, 8.2x, and 8.4x allow remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet. Attackers can guess the insufficiently random directory name and directly request access to the uploaded file.

Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates provided by the cimserver, allowing attackers to obtain sensitive data or gain privileges.

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.