CVE Vulnerability Catalog

Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.

The vulnerability allows remote PHP code execution by injecting a remote file via the 'name' parameter in the 'article' mode of modules.php in SocialMPN. An attacker can send malicious code from an external server.

Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before version 0.51 prevents proper detection of viruses in certain files such as .CAB or .ZIP files.

Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.

Vulnerability in xloadimage before version 4.1-r2 and xli before version 1.17 allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.

Multiple vulnerabilities in xli before version 1.17 due to buffer management errors when processing image properties, some related to integer overflows in PPM files, may allow remote attackers to execute arbitrary code.

Buffer overflow vulnerability in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.

A vulnerability in the scan.c file of the LibXPM library may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.

A format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.

Vulnerability in iptables before version 1.2.11 causes required modules to not be properly loaded during system startup under certain conditions. As a result, firewall rules fail to load, exposing the system to remote attacks.

Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function.

Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.

Multiple buffer overflows in libXML versions 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via a long FTP URL, a long proxy URL containing FTP data, and other overflows related to manipulation of DNS length values.

RaidenHTTPD 1.1.32 and possibly earlier versions before 1.1.34 contain a buffer overflow vulnerability. A remote attacker can exploit a long URL to execute arbitrary code on the server.

A format string vulnerability in the log functions of dhcpd in version 2.x allows remote DNS servers to execute arbitrary code via specially crafted DNS messages. This is a different vulnerability than CVE-2002-0702.

Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.

Vulnerability in fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.

Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.

The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

Buffer overflow in the getnickuserhost function in BNC 2.8.9 (and possibly other versions) allows a remote IRC server to execute arbitrary code by sending a response containing many '!' or '@' characters.