CVE Vulnerability Catalog

A vulnerability in the Scientific Atlanta DPX2100 Cable Modem allows a remote attacker to cause a denial of service (device crash) by sending an IP packet with the same source and destination IP addresses and ports, with the SYN flag set (also known as a Land attack). The attack can be performed using the hping2 tool.

The vulnerability in CMake before version 2.2.0-r1 on Gentoo Linux is due to an untrusted search path. A local user in the portage group can place a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH, leading to privilege escalation.

Multiple buffer overflows in IBM AIX versions 5.1, 5.2, and 5.3 in the muxatmd and slocal programs allow remote attackers to execute arbitrary code on the vulnerable system.

Buffer overflow vulnerability in the malloc debug system in IBM AIX 5.3 allows local users to execute arbitrary code.

A vulnerability in mshtml.dll of Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by processing button-focus events simultaneously with document reloading, as observed in Microsoft Office InfoPath 2003 when repeatedly clicking the 'Delete' button in a repeating section of a form.

Buffer overflow vulnerability in Watchfire AppScan QA 5.0.609 and 5.0.134 allows remote web servers to execute arbitrary code via an HTTP 401 response with a WWW-Authenticate header containing a long Realm field.

Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the username and password fields, and the id parameter.

Vulnerability in Linksys WRT54GS and BEFW11S4 routers allows a remote attacker to cause a device crash (denial of service) by sending an IP packet with the same source and destination IP addresses and ports, with the SYN flag set (LAND attack).

Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via parameters in various PHP scripts.

The vulnerability in Alt-N MDaemon and WorldClient 8.1.3 is that the WorldClient.dll component trusts a Session parameter containing a randomly generated session ID associated with a username. A remote attacker can impersonate another user by guessing or sniffing this random value.

Unspecified Cisco Catalyst Switches are vulnerable to a denial of service (DoS) attack via an IP packet with the same source and destination IPs and ports, with the SYN flag set (aka LanD attack). This attack causes a device crash.

Multiple SQL injection vulnerabilities in ASPBB 0.4 allow remote attackers to execute arbitrary SQL commands via the TID, FORUM_ID, and PROFILE_ID parameters.

SQL injection vulnerability in view_Results.php in DreamLevels DreamPoll 3.0 final allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in the News module in Envolution allows remote attackers to execute arbitrary SQL commands via the startrow and catid parameters.

Unspecified vulnerability in Positive Software Corporation CP+ (cpplus) before version 2.5.5. The flaw may be related to a bug in Perl, but there is insufficient information to confirm if it is the same as CVE-2005-3962.

A vulnerability in Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain 'magic value' to port 5005, which also leads to a memory leak.

Multiple heap-based buffer overflows in Trend Micro ServerProtect Management Console 5.58 and earlier, used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, were found in isaNVWRequest.dll and relay.dll. Remote attackers can exploit these vulnerabilities by sending crafted Chunked transfer requests with wrapped length values, leading to arbitrary code execution.

The installation of Trend Micro PC-Cillin Internet Security 2005 12.00 build 1244, and probably previous versions, uses insecure default ACLs, which allows local users to cause a denial of service (disabled service) and gain system privileges by modifying or moving critical program files.

The vulnerability in Netgear RP114 (and possibly other versions and devices) allows a remote attacker to perform a SYN flood attack between a system on the internal interface and another on the external interface, temporarily stopping routing between the interfaces.

The vulnerability in the Motorola SB5100E Cable Modem allows a remote attacker to cause a denial of service (device crash) by sending an IP packet with the same source and destination IPs and ports, with the SYN flag set (aka LAND attack).