CVE Vulnerability Catalog

Apache-SSL versions 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allow remote attackers to forge a client certificate by using basic authentication with the target user's 'one-line DN'.

A stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.

Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 versions 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token.

Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

Multiple vulnerabilities in PWLib before version 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.

The mksmbpasswd script in Samba 3.0.0 and 3.0.1 may overwrite the user password with an uninitialized buffer when creating an account marked as disabled. This could enable the account with a more easily guessable password.

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

Multiple SQL injection vulnerabilities in phpGedView before version 2.65 allow remote attackers to execute arbitrary SQL via timeline.php and placelist.php.

Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to 'cause negative totals' via an order with a large quantity.

WWW File Share Pro version 2.42 and earlier allows remote attackers to bypass directory access restrictions via a URL with a trailing dot or a URI with a leading slash or backslash character.

The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries.

CVE-2004-0069 describes a format string vulnerability in HD Soft Windows FTP Server version 1.6 and earlier, allowing remote attackers to execute arbitrary code via format string specifiers in the username, processed by the wscanf function.

Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager, Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code.

The vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.

tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets.

The CVE-2004-0068 vulnerability in PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server containing the code.

The SPP_VerifyPVV function in nCipher payShield SPP library versions 1.3.12, 1.5.18, and 1.6.18 returns a Status_OK value even if the HSM returns a different status code. This could lead applications to make incorrect security-critical decisions, such as accepting an invalid PIN number.