CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in index.php of Php-Nuke versions 6.x through 7.3. A remote attacker can modify the modpath parameter to point to a URL on a remote server containing malicious PHP code, allowing arbitrary code execution on the server.

A stack-based buffer overflow in the DecodeBase16 function, used in the IRC module and web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

A format string vulnerability in the logging function of IGI 2 Covert Strike server version 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

A buffer overflow vulnerability in the WriteToLog function of JRun web server connectors versions 3.0 through 4.0, such as mod_jrun and mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.

Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.

The vulnerability in Star before version 1.5_alpha46 is that the program does not drop the effective user ID (euid) before calling external programs. This allows local users to gain privileges by modifying the RSH environment variable to point to a malicious program.

A format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.

Format string vulnerability in telnetd-ssl version 0.17 and earlier allows remote attackers to execute arbitrary code.

Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from 'memory corruption') via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the '<STYLE>@;/*' string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the 'CSS Heap Memory Corruption Vulnerability.'

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

A buffer overflow in layer2.c of mpg123 version 0.59r and possibly 0.59s allows remote attackers to execute arbitrary code via a specially crafted MP3 or MP2 file.

Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

A stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier may occur in situations that cross security boundaries, such as an FTP server. This may allow remote attackers to execute arbitrary code via a long filename argument.

A format string vulnerability in the Speedtouch USB driver before version 1.3.1 allows local users to execute arbitrary code via modem_run, pppoa2, or pppoa3.

A vulnerability in Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a specially crafted link.

Vulnerability in Sendmail before version 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a configuration script with a fixed username and password, allowing remote attackers to use Sendmail as an open mail relay to send spam.

A vulnerability in distcc before version 2.16 on 64-bit platforms causes incorrect interpretation of IP-based access control rules. This allows remote attackers to bypass intended restrictions.