CVE Vulnerability Catalog

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the attrib_valid function, covert function, declare statement, crafted query plan, or crafted install java statement (requires database owner or 'sa' role privileges).

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Untrusted execution path vulnerability in the diag commands (lsmcode, diag_exec, invscout, invscoutd) in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.

Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.

Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.

Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges.

The Asante FM2008 device running firmware version 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access.

The vulnerability in Cisco Unity versions 2.x, 3.x, and 4.x integrated with Microsoft Exchange is due to hard-coded usernames and passwords. A remote attacker can exploit these credentials to gain unauthorized access and change configuration settings or read incoming and outgoing email messages.

The vulnerability in Asante FM2008 running firmware 1.06 stores the username and password in cleartext in the configuration backup, which could allow remote attackers to gain unauthorized access.

Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code.

CVE-2004-0393 describes a format string vulnerability in the msg function for the rlpr daemon (rlprd) version 2.0.4, allowing remote attackers to execute arbitrary code via format string specifiers in a buffer that cannot be resolved, which is passed to the syslog function.

CVE-2004-0448 describes a vulnerability in the log function for jftpgw version 0.13.4 and earlier, allowing remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.

The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, allowing local users to execute arbitrary commands via shell metacharacters in a system call.

Buffer overflow in the msg function for rlpr daemon (rlprd) version 2.04 allows local users to execute arbitrary code.

The vulnerability in admin.php of Newsletter ZWS allows a remote attacker to gain administrative privileges by performing a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.

A vulnerability in the Unreal Engine allows remote attackers to execute arbitrary code by sending a UDP packet with a long value in a secure query, causing memory overwrite. It affects multiple games including Unreal Tournament 2004, DeusEx, and Postal 2.

The eay_check_x509cert function in KAME Racoon incorrectly validates certificates even when OpenSSL validation fails, allowing remote attackers to bypass authentication.

A stack-based buffer overflow in MySQL 4.1.x before 4.1.3 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.

Multiple format string vulnerabilities in the logquit, logerr, or loginfo functions in Software Upgrade Protocol (SUP) allow remote attackers to execute arbitrary code via format string specifiers in messages logged by syslog.

Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory. These are different vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.