CVE Vulnerability Catalog

Multiple buffer overflows in gnocatan 0.6.1 and earlier allow attackers to execute arbitrary code.

Buffer overflow in net_swapscore for typespeed 0.4.1 and earlier allows remote attackers to execute arbitrary code.

Various PDF viewers, including Adobe Acrobat 5.06 and Xpdf 1.01, allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.

Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll) in IIS 5.0 allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.

Ethereal 0.9.12 and earlier does not handle certain strings properly in various dissectors, potentially leading to unknown consequences.

The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.

Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup.

CVE-2003-0391 describes a format string vulnerability in Magic WinMail Server 2.3 and possibly other 2.x versions. It allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via format string specifiers in the PASS command.

Vignette StoryServer versions 4 and 5, and Vignette V/5 and V/6 with the SSI EXEC feature enabled, allow remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.

Buffer overflow in FastTrack network code, used in Kazaa 2.0.2 and possibly other versions and products, allows remote attackers to execute arbitrary code via a packet containing a large list of supernodes.

Ultimate PHP Board (UPB) version 1.9 allows remote attackers to execute arbitrary PHP code with UPB administrator privileges via an HTTP request containing the code in the User-Agent header, which is executed when the administrator runs admin_iplog.php.

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass 'from=' and 'user@host' address restrictions.

The objects.inc.php4 file in BLNews 2.1.3 contains a vulnerability that allows remote attackers to execute arbitrary PHP code via a Server[path] parameter pointing to malicious code on an attacker-controlled website.

Buffer overflow in atftp daemon (atftpd) 0.6.1 and earlier, and possibly later versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename.

Buffer overflow in xaos 3.0-23 and earlier, when running setuid, allows local users to gain root privileges via a long -language option.

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with. This could allow attackers to gain privileges.

Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588.