CVE Vulnerability Catalog

CVE-2003-1170 describes a format string vulnerability in main.cpp in versions 0.9.1 and 0.9.5pre2 of kpopup. This allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via format string specifiers in command line arguments.

Multiple PHP remote file inclusion vulnerabilities in Advanced Poll 2.0.2 allow remote attackers to execute arbitrary PHP code via the include_path parameter in several files.

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke versions 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.

The scripts menu.inc.php, datasets.php, and mass_operations.inc.php in N/X 2002 allow remote attackers to execute arbitrary PHP code via a c_path that references a URL on a remote web server containing the code.

Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allow remote attackers to execute arbitrary code via format string specifiers in syslog.

In Mambo 4.0.12, the index2.php file allows remote attackers to gain administrator access via a URL request where session_id is set to the MD5 hash of a session cookie.

Buffer overflow in Avant Browser 8.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.

A stack-based buffer overflow in the reply_nttrans function in Samba 2.2.7a and earlier allows remote attackers to execute arbitrary code via a crafted request.

Buffer overflow in the setupterm function of the lanadmin and landiag programs in HP-UX 10.0 through 10.34 allows local users to execute arbitrary code via a long TERM environment variable.

Multiple buffer overflows in H-Sphere WebShell 2.3 allow remote attackers to execute arbitrary code via (1) a long URL content type in CGI::readFile, (2) a long path in diskusage, and (3) a long fname in flist.

Buffer overflow in CuteFTP versions 4.2 and 5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.

Multiple SQL injection vulnerabilities in a.shopKart 2.0.3 in addcustomer.asp, addprod.asp, and process.asp allow remote attackers to execute arbitrary SQL and obtain sensitive information via the zip, state, country, phone, and fax parameters.

Unspecified vulnerability in the Cache' Server Page (CSP) implementation in InterSystems Cache' versions 4.0.3 through 5.0.5 allows remote attackers to gain complete control of a server.

The activate.php file in versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid.

Buffer overflow in Proxomitron Naoko 4.4 allows remote attackers to execute arbitrary code via a long request.

SonicWall Pro running firmware 6.4.0.1 is vulnerable to an attack that can lead to a remote denial of service via a long HTTP POST request to the internal interface, possibly due to a buffer overflow.

CVE-2003-1504 is a SQL injection vulnerability in variables.php in Goldlink 3.0 that allows remote attackers to execute arbitrary SQL commands via the vadmin_login or vadmin_pass cookie in a request to goldlink.php.

The SIP implementation in Columbia SIP User Agent (sipc) 1.74 and earlier versions before sipc 2.0 build 2003-02-21 is vulnerable to remote attacks. Attackers can cause denial of service or execute arbitrary code via crafted INVITE messages.

Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and execute arbitrary code via a spoofed server response containing a long string followed by a newline character.

Origo ASR-8100 ADSL Router version 3.21 has an administration service running on port 254 that does not require a password. This allows remote attackers to cause a denial of service by restoring factory defaults.