CVE Vulnerability Catalog

The default installation of MSDE via McAfee ePolicy Orchestrator versions 2.0 to 3.0 allows attackers to execute arbitrary code. This process involves obtaining the database administrator username and encrypted password from a configuration file, cracking the password due to weak cryptography, and using it to pass commands through xp_cmdshell.

Microsoft SQL Server 7, 2000, and MSDE allow local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port, leading to a buffer overflow.

Multiple integer overflows in a Microsoft Windows DirectX MIDI library (QUARTZ.DLL) allow remote attackers to execute arbitrary code via a MIDI (.mid) file with large length for a Text or Copyright string, or a large number of tracks, leading to a heap-based buffer overflow.

Patches for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.

The checklogin function in omail.pl for omail webmail version 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in (1) password, (2) domain name, or (3) username.

SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.

The mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAIN_PATH parameter to reference a URL on a remote web server that contains the code.

Multiple SQL injection vulnerabilities in ProductCart versions 1.5 through 2 allow remote attackers to gain access to the admin control panel or other privileges.

mpg123 version 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, leading to a negative frame size.

A format string vulnerability in the Backup and Restore Utility for Unix (BRU) version 17.0 and earlier, when running setuid, allows local users to execute arbitrary code via format string specifiers in a command line argument.

Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.

Buffer overflow in the Client Detection Tool (cdt.dll) plugin for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.

An unknown vulnerability in SGI IRIX versions 6.5.x through 6.5.20, and possibly earlier, allows local users to cause a core dump in scheme and potentially gain privileges via certain environment variables.

SQL injection vulnerabilities in the PostgreSQL and MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.

Brooky eStore versions 1.0.1 through 1.0.2b allow remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.

The admin.php file in Digi-ads 1.1 has a vulnerability that allows remote attackers to bypass authentication by using a cookie with the username set to the administrator's name. The condition in admin.php does not require a correct password.

Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.

The mailcap file for mozart 1.2.5 and earlier allows Oz applications to be passed to the Oz interpreter, enabling remote attackers to execute arbitrary Oz programs in a MIME-aware client program.

Cisco IOS versions 11.x and 12.0 through 12.2 allow remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.