CVE Vulnerability Catalog

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allow attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an 'unchecked buffer,' possibly a buffer overflow.

The RPC Runtime Library for Microsoft Windows NT 4.0 contains a vulnerability that allows a remote attacker to read active memory or cause a system crash via a malicious message, possibly related to improper length values.

The vulnerability in Sophos Small Business Suite 1.00 on Windows involves improper handling of files whose names contain reserved MS-DOS device names such as LPT1, COM1, AUX, CON, or PRN. This allows malicious code to bypass detection when installed, copied, or executed.

The vulnerability in the SMTP component of Windows XP 64-bit, Windows Server 2003, and the Exchange Routing Engine component of Exchange Server 2003 allows a remote attacker to execute arbitrary code by sending a malicious DNS response with improperly validated length values.

The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

Integer overflow vulnerability in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition. A remote attacker can exploit improper length validation in compressed (zipped) folders to execute arbitrary code.

The NNTP component in Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 contains a vulnerability that allows remote code execution via specially crafted XPAT patterns. The issue is due to improper length validation and heap-based buffer overflows (off-by-one and heap-based buffer overflow).

Buffer overflow vulnerability in Windows Program Group Converter (grpconv.exe) allows remote attackers to execute arbitrary code via a specially crafted shell: URL with a long filename and .grp extension, which is not properly handled when the shell launches grpconv.exe.

Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) versions 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections.

A heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.

A format string vulnerability in log.c in rssh before version 2.2.2 allows remote authenticated users to execute arbitrary code.

Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements.

Buffer overflow vulnerability in Ability Server versions 2.25, 2.32, 2.34, and possibly others, allows remote attackers to execute arbitrary code via a long APPE command.

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, allowing local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages with malformed quoting in MIME headers, parameters, and values.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients.

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients.

Buffer overflow vulnerability in the _maincfgret.cgi script in Ipswitch WhatsUp Gold before version 8.03 Hotfix 1. A remote attacker can exploit a long instancename parameter to execute arbitrary code.