CVE Vulnerability Catalog

A stack-based buffer overflow in vfs_s_resolve_symlink of Midnight Commander (mc) version 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

The mremap system call in Linux kernel 2.4.x before version 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, allowing local users to cause a denial of service and possibly gain privileges by remapping a virtual memory area.

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame. When the history.back function is called, this URL is added to the history list and executed in the top window's zone.

Buffer overflow in fsp before version 2.81.b18 allows remote users to execute arbitrary code.

Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.

Multiple unknown vulnerabilities in (1) lpstat and (2) the libprint library in Solaris versions 2.6 through 9 may allow attackers to execute arbitrary code or read and write arbitrary files.

CVS server before version 1.11.10 may allow attackers to create directories and files in the file system root directory via malformed module requests.

XChat version 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, leading to a null dereference.

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer. This allows local or remote attackers to conduct unauthorized activities via a 'bubba' local user account, an open TCP port 34571, or when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.

Buffer overflows in lftp version 2.6.9 and earlier in the try_netscape_proxy and try_squid_eplf functions allow remote HTTP servers to execute arbitrary code via long directory names processed by the ls or rels commands.

CVE-2003-0978 describes a format string vulnerability in gpgkeys_hkp, allowing remote attackers or a malicious keyserver to cause a denial of service (crash) and potentially execute arbitrary code during key retrieval.

Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11 and 5.x before 5.0.5 allows remote attackers to execute arbitrary code via a long password.

Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.

The Q.931 dissector in Ethereal before version 0.10.0 and Tethereal allows remote attackers to cause a denial of service (crash) by sending a malformed Q.931 packet, leading to a null dereference.

Cisco PIX firewall versions 5.x.x and 6.3.1 and earlier are vulnerable to an attack that can cause a crash and reload of the device via an SNMPv3 message when the snmp-server feature is enabled.

Buffer overflow vulnerability in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.

SQL injection vulnerability in calendar.php in Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.

KaZaA Media Desktop (KMD) version 2.0 launches advertisements in the Internet Explorer local security zone, which could allow remote attackers to view local files and possibly execute arbitrary code.

A heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.