CVE Vulnerability Catalog

The vulnerability in pstotext before version 1.8g is due to improper use of the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files. This allows a remote attacker to execute arbitrary commands via a malicious PostScript file.

A buffer overflow vulnerability in the Discovery Service of BrightStor ARCserve Backup versions 9.0 through 11.1 allows a remote attacker to execute arbitrary commands by sending a large packet to TCP port 41523. This is a different vulnerability than CVE-2005-0260.

A buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol.

SQL injection vulnerability in mod_forum/read_message.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to 'Forum-read_mess'. This is a different vulnerability than CVE-2005-1701.

Vulnerability in Web Content Management News System allows remote attackers to create arbitrary accounts and gain privileges via a direct request to Admin/Users/AddModifyInput.php.

Eval injection vulnerability in Karrigell before 2.1.8 allows remote attackers to execute arbitrary Python code via modified arguments to a Karrigell services (.ks) script, which can reference functions from libraries that are used by that script.

Buffer overflow vulnerability in the rdb_query function in Denora IRC Stats 1.0 may allow attackers to execute arbitrary code.

Stack-based buffer overflow in the Backup Agent for Microsoft SQL Server in BrightStor ARCserve Backup Agent for SQL Server 11.0 allows remote attackers to execute arbitrary code via a long string sent to port 6070 or 6050.

Unknown vulnerability in apt-cacher in Debian 3.1, related to 'missing input sanitising,' allows remote attackers to execute arbitrary commands on the caching server.

Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via various parameters in multiple PHP scripts.

The pstopnm tool in netpbm improperly uses the "-dSAFER" option when calling Ghostscript to convert a PostScript file into PBM, PGM, or PNM formats. This allows external user-assisted attackers to execute arbitrary commands.

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel.

SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.

The Gopher client version 3.0.5 contains a vulnerability in gopher.c that improperly creates temporary files, allowing local users to escalate privileges.

SQL injection vulnerability in viewPrd.asp in Product Cart 2.6 allows remote attackers to execute arbitrary SQL commands via the idcategory parameter.

B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg.

SQL injection vulnerability in login.asp of Thomson Web Skill Vantage Manager. Remote attacker can execute arbitrary SQL commands via the svmPassword parameter.

Multiple SQL injection vulnerabilities in Contrexx before version 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 'value' parameter in the poll module or the 'pId' parameter in the gallery module.

Buffer overflow vulnerability in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section.

Multiple integer overflows in the TNEF, CHM, and FSG file format processors in libclamav for ClamAV 0.86.1 and earlier allow remote attackers to gain privileges via a crafted e-mail message.