CVE Vulnerability Catalog

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.

Versions of wmtv 0.6.5 and earlier allow local users to modify arbitrary files via a symlink attack on a configuration file.

The pam_ldap PAM LDAP module before version 144 has a format string vulnerability in the logging function, allowing attackers to execute arbitrary code via format strings in the configuration file name.

Vulnerability in the XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.

Buffer overflow in the vpnclient program for UNIX VPN Client before version 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.

Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.

Buffer overflow in cpr for the SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.

The vulnerability in TOLIS Group's Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.

The Safe Mode feature (safe_mode) in PHP from version 3.0 to 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using 'LOAD DATA INFILE LOCAL' SQL statements.

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.

Hosting Controller versions 1.1 to 1.4.1 returns different error messages based on whether a valid or invalid username is provided. This allows remote attackers to determine the existence of valid usernames, making it easier to conduct a brute force attack.

Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.

The retrieve_password.pl script in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, allowing remote attackers to request a new password on behalf of another user.

The mod_python module in version 2.7.6 and earlier allows access to a module indirectly imported by a published module, enabling remote attackers to call potentially dangerous functions from the imported module.

Infopop UBB.Threads version 5.4 and Wired Community Software WWWThreads versions 5.0 through 5.0.9 allow remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends in a different extension.

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.

Sudo before 1.6.6 contains an off-by-one error that can lead to a heap-based buffer overflow. This allows local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

A buffer overflow in GNU Chess (gnuchess) version 5.02 and earlier may occur when the application is used in a manner inconsistent with its design as a single-user application. This may allow local or remote attackers to execute arbitrary code via a long command.

IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the '[B]' sequence, which makes the message appear legitimate.