CVE Vulnerability Catalog

Buffer overflow in BRS WebWeaver 1.04 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP (1) POST or (2) HEAD request.

Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string.

Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588.

Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument.

Vignette StoryServer 5 and Vignette V/5 allow remote attackers to read and modify license information and cause a denial of service by directly accessing the /vgn/license template.

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, allowing local users to gain privileges by reading a plaintext password in the statefile.

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with. This could allow attackers to gain privileges.

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase '.JSP' extension instead of the lowercase .jsp extension.

Multiple buffer overflows in the dbm_open and dbminit functions in Solaris 2.6 through 9 may allow local users to gain root privileges via long arguments to programs like Xsun.

CVE-2003-1086 describes a vulnerability in pMachine Free and pMachine Pro 2.2 and 2.2.1 that allows remote file inclusion. Attackers can execute arbitrary PHP code by modifying the pm_path parameter to point to a URL on a remote server.

An unknown vulnerability in GNU Ghostscript before version 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal and mailbox size values that cause either integer signedness errors or integer overflow errors.

The c-client IMAP Client, used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

The cdrecord program in cdrtools 2.0 has a format string vulnerability that allows local users to gain privileges via format string specifiers in the dev parameter.

SQL injection vulnerability in register.asp in Snitz Forums 2000 before version 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.

Buffer overflow in KON kon2 version 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

Konqueror Embedded and KDE 2.2.2 and earlier do not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long MAIL FROM or RCPT TO commands.