CVE Vulnerability Catalog

Buffer overflow in cd9660.util in Apple Mac OS X versions 10.0 through 10.3.2 and Apple Mac OS X Server versions 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.

mod_access in Apache 1.3 before 1.3.30, when running on big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.

GTKSee versions 0.5 and 0.5.1 have a heap-based buffer overflow that allows remote attackers to execute arbitrary code via a PNG image of certain color depths.

A stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.

CVE-2003-1018 describes a format string vulnerability in the enq command in AIX 4.3, 5.1, and 5.2 that allows local users with rintq group privileges to gain additional privileges.

Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved, allowing remote attackers to gain unauthorized access via the new account before it is saved.

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to member.php, misc.php, or today.php.

A stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag.

The vulnerability in Dameware Mini Remote Control 4.1.0.0 is due to using insufficiently random data to generate the encryption key. This allows a remote attacker to guess the key via brute force and gain access to sensitive information.

A buffer overflow vulnerability in Mollensoft Lightweight FTP Server 3.6, triggered by a long CWD command, allows remote authenticated users to cause a denial of service (crash) and potentially execute arbitrary code.

Buffer overflow vulnerability in the logging function of Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.

Ipswitch WS_FTP Server 4.0.2 contains a backdoor account named XXSESS_MGRYY with a default password, allowing remote attackers to gain access.

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the ID parameter in more.asp and category_news.asp, and the filter parameter in news_sort.asp.

The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter in resend.asp or news_view.asp scripts.

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).

XFree86 version 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

The Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy.