CVE Vulnerability Catalog

OpenCA versions before 0.9.1.4 incorrectly use certificates in the chain to check the serial number, which could lead to accepting revoked or expired certificates.

The web-tools in SAP DB before version 7.4.03.30 have a vulnerability that allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.

Versions of SAP database server (SAP DB) 7.4.03.27 and earlier allow local users to gain SYSTEM privileges via a malicious 'NETAPI32.DLL' in the current working directory, which is found and loaded by SAP DB before the real DLL.

CVE-2003-0946 describes a format string vulnerability in clamav-milter for Clam AntiVirus versions 0.60 through 0.60p and earlier than 0.65. This allows remote attackers to cause a denial of service and potentially execute arbitrary code via format string specifiers in the email address argument of a 'MAIL FROM' command.

The Web Database Manager in web-tools for SAP DB before version 7.4.03.30 generates predictable session IDs, allowing remote attackers to conduct unauthorized activities.

The eo420_GetStringFromVarPart function in veo420.c for SAP database server (SAP DB) version 7.4.03.27 and earlier may have a vulnerability that allows remote attackers to execute arbitrary code. This issue arises from the failure to properly null-terminate a string, leading to a buffer overflow.

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.

Symantec PCAnywhere versions 10.x and 11, when started as a service, allow attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.

Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates provided by the cimserver, allowing attackers to obtain sensitive data or gain privileges.

Buffer overflow in the WAECHO default service in web-tools in SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.

The NFS Server (XNFS.NLM) for Novell NetWare 6.5 does not properly enforce the sys:\etc\exports file when hostname aliases from the sys:etc\hosts file are used. This could allow users to mount file systems when XNFS should deny access for the host.

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.

Buffer overflow in the CDE libDtHelp library allows local users to execute arbitrary code via modified DTHELPUSERSEARCHPATH, DTSEARCHPATH, or LOGNAME environment variables.

Buffer overflow in Ethereal 0.9.15 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed GTP MSISDN string.

In Ethereal versions 0.9.15 and earlier, a heap-based buffer overflow allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the SOCKS dissector.

CVE-2003-0886 describes a format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier that allows remote attackers to execute arbitrary code.