CVE Vulnerability Catalog

In Outgun 1.0.3 bot 2 and earlier, the leetnet functions (leetnet/rudp.cpp) contain a buffer over-read vulnerability. A remote attacker can send packets with incorrect message sizes, causing an application crash (denial of service).

In Outgun 1.0.3 bot 2 and earlier, the leetnet functions (leetnet/rudp.cpp) improperly handle large packets, allowing a remote attacker to cause an exception and interrupt the game (denial of service).

A buffer overflow vulnerability in FileZilla before version 2.2.23 allows remote attackers to execute arbitrary code via unknown attack vectors.

RealVNC 4.1.1 and other products using it (e.g., AdderLink IP, Cisco CallManager) allow a remote attacker to bypass authentication by sending a request with an insecure security type ("Type 1 - None"), which is accepted even if not offered by the server. The attack was originally demonstrated using a long password.

SQL injection vulnerability in charts.php of the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.

A PHP remote file inclusion vulnerability exists in pafiledb_constants.php within the Download Manager (mxBB pafiledb) integration used with phpBB. Attackers can exploit the module_root_path parameter to execute arbitrary PHP code remotely.

A buffer overflow vulnerability was found in the getsym function in tekhex.c of libbfd in GNU Binutils before 20060423, as used by GNU strings. This allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Tektronix Hex Format (TekHex) record where the length character is not a valid hexadecimal character.

In Apple Mac OS X 10.3.9 and 10.4.6, the bundle API in CoreFoundation loads dynamic libraries even if the client application has not directly requested it. This allows attackers to execute arbitrary code from an untrusted bundle.

A heap-based buffer overflow in Apple QuickTime before version 7.1 in the ReadBMP function allows remote attackers to execute arbitrary code via a crafted BMP file. This issue was originally part of CVE-2006-1983 but is now a separate CVE.

In Apple Mac OS X 10.3.9 and 10.4.6, the Mail application contains an integer overflow when processing MacMIME encapsulated attachments. A remote attacker can exploit this vulnerability to execute arbitrary code via a crafted attachment.

A buffer overflow in QuickTime Streaming Server on Apple Mac OS X 10.3.9 and 10.4.6 occurs when processing a crafted RTSP request during message logging. This allows a remote attacker to execute arbitrary code.

A vulnerability in the Mail application on Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to execute arbitrary code by sending an enriched text email message with invalid color information, causing Mail to allocate and initialize arbitrary classes.

MySQL Manager in Apple Mac OS X 10.3.9 and 10.4.6, when setting up a new MySQL database server, does not use the provided 'New MySQL root password', leaving the MySQL root password blank. This allows local users to gain full privileges to that database.

An integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.

A vulnerability in QuickTime Streaming Server on Apple Mac OS X 10.3.9 and 10.4.6 allows remote attackers to cause a denial of service (crash and connection interruption) by sending a QuickTime movie with a missing track, triggering a null pointer dereference.

In vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, a remote attacker can authenticate to an account that does not have a cleartext password set by using a blank password for SMTP AUTH or APOP.

IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root.

Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls.

The vulnerability in Ideal Science Ideal BB 1.5.4a and earlier is due to an incomplete blacklist of file extensions. An attacker can upload and execute an ASP script using a .asa file, which bypasses the check for the .asp extension but is executable on the server.

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges and view and configure log files via a direct request to the admin.php or settings.php pages.