CVE Vulnerability Catalog

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.

XMMS.pm in X2 XMMS Remote allows remote attackers to execute arbitrary commands via shell metacharacters in a request to TCP port 8086.

Buffer overflow in CuteFTP versions 4.2 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.

Multiple SQL injection vulnerabilities in a.shopKart 2.0.3 in addcustomer.asp, addprod.asp, and process.asp allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.

Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' versions 4.0.3 through 5.0.5 allows remote attackers to gain complete control of a server.

Integer overflow in MP3Broadcaster for Apple QuickTime/Darwin Streaming Server 4.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed ID3 tags in MP3 files.

The activate.php file in versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.

RTS CryptoBuddy versions 1.0 and 1.2 use a weak encryption algorithm for the passphrase and generate predictable keys, making it easier for attackers to guess the passphrase.

A stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon versions 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.

Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ';' (semicolon) characters in escape sequences, leading to a buffer overflow.

PeopleSoft PeopleTools versions 8.1x, 8.2x, and 8.4x allow remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet. Attackers can guess the insufficiently random directory name and directly request access to the uploaded file.

SAP DB versions before 7.4.03.30 install several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases.

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.

The rlm_smb module in FreeRADIUS 0.9.3 and earlier has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long User-Password attribute.

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.

The NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce the sys:\etc\exports file when hostname aliases from the sys:etc\hosts file are used. This could allow users to mount file systems when XNFS should deny access for the host.

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as swinstall and swmodify.

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ('NetSetup.LOG').

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004 do not properly check the length of the 'Macro names' data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.