CVE Vulnerability Catalog

Directory Services in Apple Mac OS X versions 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server versions 10.2 through 10.3.2 accept authentication server information from unknown LDAP or NetInfo sources, which can be exploited by a malicious DHCP server.

Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.

mod_access in Apache 1.3 before 1.3.30, when running on big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions.

GTKSee versions 0.5 and 0.5.1 have a heap-based buffer overflow that allows remote attackers to execute arbitrary code via a PNG image of certain color depths.

Buffer overflow in cd9660.util in Apple Mac OS X versions 10.0 through 10.3.2 and Apple Mac OS X Server versions 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter.

SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to member.php, misc.php, or today.php.

A stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag.

The vulnerability in Dameware Mini Remote Control 4.1.0.0 is due to using insufficiently random data to generate the encryption key. This allows a remote attacker to guess the key via brute force and gain access to sensitive information.

Buffer overflow vulnerability in the logging function of Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.

A buffer overflow vulnerability in Mollensoft Lightweight FTP Server 3.6, triggered by a long CWD command, allows remote authenticated users to cause a denial of service (crash) and potentially execute arbitrary code.

Ipswitch WS_FTP Server 4.0.2 contains a backdoor account named XXSESS_MGRYY with a default password, allowing remote attackers to gain access.

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the ID parameter in more.asp and category_news.asp, and the filter parameter in news_sort.asp.

The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.

News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter in resend.asp or news_view.asp scripts.

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

XFree86 version 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to 'notification logging.'

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) affects certain versions of RealSecure and BlackICE products. Remote attackers can execute arbitrary code by sending an SMB packet containing an authentication request with a long username.

In Calife versions 2.8.5 and earlier, a heap-based buffer overflow may allow local users to execute arbitrary code via a long password.