CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.

Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to 'notification logging.'

Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM) affects certain versions of RealSecure and BlackICE products. Remote attackers can execute arbitrary code by sending an SMB packet containing an authentication request with a long username.

The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, causing Squid to use only a portion of the requested URL when comparing it against the access control lists.

DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writable removable media, which may lead to handling issues.

XFree86 version 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

CVE-2004-0159 in hsftp 1.11 has a format string vulnerability that allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an 'ls' command.

In Calife versions 2.8.5 and earlier, a heap-based buffer overflow may allow local users to execute arbitrary code via a long password.

Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) versions 2.6.0 through 2.6.5 allows remote attackers to execute arbitrary code via a long URL.

Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) version 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

The Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy.

The 'Allow cPanel users to reset their password via email' feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.

The login page of cPanel 9.1.0 (and possibly other versions) allows a remote attacker to execute arbitrary code by injecting shell metacharacters in the 'user' parameter.

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81 allow remote attackers to cause a denial of service and possibly execute arbitrary code.

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets. This allows attackers to cause a denial of service and possibly execute arbitrary code.

Multiple unknown vulnerabilities in XFree86 versions 4.1.0 to 4.3.0, related to improper handling of font files.

Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

Multiple integer overflows in the Microsoft ASN.1 library (MSASN1.DLL) can lead to arbitrary code execution by remote attackers. The issue affects Windows NT 4.0, 2000, and XP, where vulnerabilities exist in LSASS.EXE, CRYPT32.DLL, and other components.

CVE-2004-0128 describes a vulnerability in the GEDCOM configuration script for phpGedView version 2.65.1 and earlier, allowing remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to point to a URL containing a malicious theme.php script.

Multiple format string vulnerabilities in the HTTP Application Intelligence component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server, allow remote attackers to execute arbitrary code via crafted HTTP requests.