CVE Vulnerability Catalog

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allow remote attackers to execute arbitrary code via format string specifiers in syslog.

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a newline character.

Origo ASR-8100 ADSL Router version 3.21 has an administration service running on port 254 that does not require a password. This allows remote attackers to cause a denial of service by restoring factory defaults.

The scripts menu.inc.php, datasets.php, and mass_operations.inc.php in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server containing the code.

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke versions 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.

Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.

Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the include_path parameter in several files.

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before version 3.9 allows remote attackers to execute arbitrary SQL commands.

CVE-2003-1170 describes a format string vulnerability in main.cpp in versions 0.9.1 and 0.9.5pre2 of kpopup. This allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments.

Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.

There is an off-by-one buffer overflow in spamc of SpamAssassin versions 2.40 through 2.43 when using BSMTP mode ('-B'). This allows remote attackers to execute arbitrary code via emails containing headers with leading '.' characters.

SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.

Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program.

ProxyView has a default administrator password of 'Administrator' for Embedded Windows NT, which allows remote attackers to gain access.

CVE-2003-1314 in EternalMart Guestbook (EMGB) 1.1 has a vulnerability in admin/auth.php that allows remote attackers to execute arbitrary PHP code via manipulation of the emgb_admin_path parameter.

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.

The SIP implementation in Mediatrix Telecom VoIP Access Devices and Gateways running SIPv2.4 and SIPv4.3 firmware allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages.

A stack-based buffer overflow in eZnet.exe can be exploited by remote attackers to cause a denial of service (crash) or execute arbitrary code. The attack can be carried out via a long GET request or long operation or autologin parameters to SwEzModule.dll.

Multiple unspecified vulnerabilities in the installer for SYSLINUX 2.01, when running setuid root, allow local users to gain privileges via unknown vectors.

XMMS.pm in X2 XMMS Remote allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086.