CVE Vulnerability Catalog

Multiple buffer overflows in the XView library 3.2 may allow local users to execute arbitrary code via setuid applications that use the library.

Vulnerability in Cisco IOS 12.2T, 12.3, and 12.3T when using Easy VPN Server XAUTH version 6 authentication allows a remote attacker to bypass authentication by sending a malformed packet.

A format string vulnerability in bidwatcher before version 1.3.17 allows remote malicious web servers from eBay or a spoofed eBay server to cause a denial of service and possibly execute arbitrary code via certain responses.

Heap-based buffer overflow in less in Red Hat Enterprise Linux 3 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file, as demonstrated using the UTF-8 locale.

Vulnerability in the SimpleXMLRPCServer module in Python 2.2, 2.3 before 2.3.5, and 2.4 allows remote attackers to read or modify module globals and potentially execute arbitrary code when an XML-RPC server uses register_instance without a _dispatch method.

Unknown vulnerability in the Red Hat Enterprise Linux 4 kernel 4GB/4GB split patch, when using the hugemem kernel, allows local users to read and write to arbitrary kernel memory and gain privileges via certain syscalls.

Multiple SQL injection vulnerabilities were found in Valdersoft Shopping Cart 3.0. An attacker can remotely execute arbitrary SQL commands by manipulating parameters in various PHP scripts.

SQL injection vulnerability in PHP scripts of phpMyFamily 1.4.0 allows remote attackers to execute arbitrary SQL commands via the person parameter in people.php or the Login field.

The kimgio library in KDE 3.4.0 contains a buffer overflow vulnerability when processing PCX image files. A remote attacker can exploit this by sending a crafted PCX file, potentially leading to arbitrary code execution.

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands via the search engine, the username or email fields in the "forgotten password" feature, or the domain name in a package order.

In the modes.c file in smail 3.2.0.120, signal handlers are implemented using unsafe library calls. This may allow attackers to execute arbitrary code via signal handler race conditions, possibly using xmalloc.

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.

A buffer overflow vulnerability in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows a local user to gain privileges via a specially crafted application.

Multiple vulnerabilities in fliccd, installed setuid root as part of the kdeedu Kstars support for INDI in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.

The Hyperlink Object Library in Windows 98, 2000, XP, and Server 2003 contains a buffer overflow that can be exploited by a remote attacker to execute arbitrary code via a crafted link.

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.

Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the 'DHTML Method Heap Memory Corruption Vulnerability'.

Vulnerability in ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.

Heap-based buffer overflow in the SvrAppendReceivedChunk function in xlsasink.dll in the SMTP service of Exchange Server 2000 and 2003 allows remote attackers to execute arbitrary code via a crafted X-LINK2STATE extended verb request to the SMTP port.

The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the 'Server Message Block Vulnerability,' and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.