CVE Vulnerability Catalog

In Gaim before version 1.5.0, a buffer overflow exists in the AIM and ICQ module. A remote attacker can exploit an away message containing a large number of AIM substitution strings (e.g., %t or %n), causing an application crash and potentially arbitrary code execution.

A double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.

Vulnerability in BEA WebLogic Server and WebLogic Express versions 7.0 through Service Pack 5 fails to log out users when an application is redeployed, allowing continued access without re-authentication, potentially violating updated security constraints or role mappings.

Integer overflow in the stralloc_readyplus function in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large SMTP request.

Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MODE line that causes an incorrect length calculation, which leads to a buffer overflow.

In GNUBoard 3.40 and earlier, the file extension check only verifies extensions that contain all lowercase letters, allowing remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Integer overflow in the readpgm function in pnm.c for GOCR 0.40, when using the netpbm library, allows remote attackers to execute arbitrary code via a PNM file with large width and height values, which leads to a heap-based buffer overflow.

Arkeia Network Backup Client 5.x contains hard-coded credentials that effectively serve as a back door, which allows remote attackers to access the file system and possibly execute arbitrary commands.

CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combined with the hard-coded string 'boogaadeeboo'.

Integer overflow in Evolution 2.0.2 and earlier, in the camel-lock-helper component, allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, leading to a zero byte memory allocation and a buffer overflow.

The vulnerability in CUPS before version 1.1.21rc1 is that the Location directive in cupsd.conf is treated as case sensitive. This allows attackers to bypass intended ACLs by using a printer name containing uppercase or lowercase letters different from those specified in the directive.

Mbedthis AppWeb HTTP server before version 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.

All three applications: AllMyVisitors, AllMyLinks, and AllMyGuests have a PHP remote file inclusion vulnerability in include/footer.inc.php. An attacker can execute arbitrary PHP code by exploiting the _AMVconfig[cfg_serverpath] parameter.

The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a backslash (\) or encoded backslash (%5C).

Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.

Buffer overflow vulnerability in extproc component in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.

RiSearch 1.0.01 and RiSearch Pro 3.2.06 allow remote attackers to use the show.pl script as an open proxy or read arbitrary local files by setting the url parameter to a http://, ftp://, or file:// URL.

k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, leading to a heap-based buffer overflow.

Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code. These issues involve both octal encoding and quoted-printable encoding.

A PHP remote file inclusion vulnerability in PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server containing the code.