CVE Vulnerability Catalog

Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.

A buffer overflow vulnerability in the British National Corpus SARA daemon (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.

SQL injection vulnerability in out.ViewFolder.php in MyDMS before version 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.

SQL injection vulnerability in SquirrelMail before version 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, probably via abook_database.php. The impact is unknown but may include database integrity compromise.

The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.

Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to the use of SSH and reporting errors, has unknown impact and attack vectors.

A vulnerability in an ActiveX control of Symantec Norton AntiVirus 2004 allows a remote attacker to cause a denial of service through excessive resource consumption and potentially execute arbitrary code.

Vulnerability in cPanel when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option. The missing --enable-discard-path option causes PHP to use the SCRIPT_FILENAME variable instead of PATH_TRANSLATED to locate and execute a script. This allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script.

Multiple buffer overflows in krb5_aname_to_localname in MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

The uudecode feature in Adobe Acrobat Reader for Unix and Linux allows remote attackers to execute arbitrary code by using shell metacharacters (backtick) in the PDF filename.

Buffer overflow vulnerability in the uudecoding feature of Adobe Acrobat Reader for Unix and Linux allows remote attackers to execute arbitrary code by providing a PDF file with a long filename.

The libcpr in SGI IRIX before version 6.5.25 has a vulnerability that allows local users to gain privileges by loading a user-provided library while restarting the checkpointed process.

CVE-2004-0425 describes a heap-based buffer overflow in SiteMinder Affiliate Agent 4.x that allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.

Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Multiple buffer overflows in Midnight Commander (mc) before version 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to handling of directory services lookups.

ProFTPD version 1.2.9 incorrectly treats Allow and Deny directives for CIDR based ACL entries, which could allow FTP clients to bypass intended access restrictions.

Vulnerability in Mozilla before version 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote websites to hijack the user interface using the 'chrome' flag and XUL files.

Unspecified vulnerability in Mac OS X before version 10.3.4 related to logging when tracing system calls. The impact and attack vectors are unknown.

XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.