CVE Vulnerability Catalog

A stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.

SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.

SL Mail Pro 2.0.9 and earlier versions have a stack-based buffer overflow in Supervisor Report Center that allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.

Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.

CVE-2004-0277 in Dream FTP 1.02 has a format string vulnerability that allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via format string specifiers in the username.

The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer.

Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter.

Load Sharing Facility (LSF) versions 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user. This could allow remote attackers within the local cluster to gain privileges.

The vulnerability in viewtopic.php of phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.

The NNTP component in Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 contains a vulnerability that allows remote code execution via specially crafted XPAT patterns. The issue is due to improper length validation and heap-based buffer overflows (off-by-one and heap-based buffer overflow).

Integer overflow vulnerability in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition. A remote attacker can exploit improper length validation in compressed (zipped) folders to execute arbitrary code.

Buffer overflow vulnerability in Windows Program Group Converter (grpconv.exe) allows remote attackers to execute arbitrary code via a specially crafted shell: URL with a long filename and .grp extension, which is not properly handled when the shell launches grpconv.exe.

The RPC Runtime Library for Microsoft Windows NT 4.0 contains a vulnerability that allows a remote attacker to read active memory or cause a system crash via a malicious message, possibly related to improper length values.

The vulnerability in Sophos Small Business Suite 1.00 on Windows involves improper handling of files whose names contain reserved MS-DOS device names such as LPT1, COM1, AUX, CON, or PRN. This allows malicious code to bypass detection when installed, copied, or executed.

The vulnerability in the SMTP component of Windows XP 64-bit, Windows Server 2003, and the Exchange Routing Engine component of Exchange Server 2003 allows a remote attacker to execute arbitrary code by sending a malicious DNS response with improperly validated length values.

Vulnerability in MySQL before versions 3.23.59, 4.0.19, 4.1.2, and 5.0.1 incorrectly checks CREATE/INSERT privileges on the original table instead of the target table during an ALTER TABLE RENAME operation. This could allow attackers to perform unauthorized actions on tables.

The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the 'SSLCipherSuite' directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, leading to a heap-based buffer overflow.

Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

Buffer overflow vulnerability in the mysql_real_connect function in MySQL 4.x before 4.0.21 and 3.x before 3.23.49. Remote DNS servers can cause a denial of service and potentially execute arbitrary code via a DNS response with a large address length (h_length).