CVE Vulnerability Catalog

Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server. Examples include using the GLOBALS[rootdp] parameter in db.php and the GLOBALS[language_home] parameter in archivednews.php with a malicious version of lang_admin.php.

Buffer overflow in ReadFontAlias from dirfile.c of XFree86 versions 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token.

Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

The MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service through resource exhaustion. This can be achieved by a low MTU, leading to a large number of small packets being generated, or by sending many packets with a small TCP payload.

CVE-2004-0128 describes a vulnerability in the GEDCOM configuration script for phpGedView version 2.65.1 and earlier, allowing remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to point to a URL containing a malicious theme.php script.

Multiple unknown vulnerabilities in XFree86 versions 4.1.0 to 4.3.0, related to improper handling of font files.

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets. This allows attackers to cause a denial of service and possibly execute arbitrary code.

The do_mremap function in Linux versions 2.2 to 2.6.2 does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, allowing local users to gain root privileges.

A stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.

Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

Multiple format string vulnerabilities in the HTTP Application Intelligence component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server, allow remote attackers to execute arbitrary code via crafted HTTP requests.

Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81 allow remote attackers to cause a denial of service and possibly execute arbitrary code.

Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.

Multiple vulnerabilities in PWLib before version 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

The mksmbpasswd script in Samba 3.0.0 and 3.0.1 may overwrite the user password with an uninitialized buffer when creating an account marked as disabled. This could enable the account with a more easily guessable password.

mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to 'cause negative totals' via an order with a large quantity.