CVE Vulnerability Catalog

Buffer overflow in the IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.

Unspecified vulnerability in Phorum versions 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.

Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service via a Short Message Service (SMS) message with a long image name.

A memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service by hanging an SMB request via a NetBIOS continuation packet.

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.

Epic Games Unreal Engine versions 226f through 436 are vulnerable to an attack that can lead to denial of service through CPU consumption or crash, and potentially execute arbitrary code. Attackers can exploit a packet with a negative size value, which is treated as a large positive number during memory allocation.

The vulnerability in guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

D-Forum versions 1.00 to 1.11 have a PHP remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code via a crafted URL in the my_header or my_footer parameters.

foo.php3 in DotBr 0.1 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function.

PHP remote file inclusion vulnerability in hit.php for Kietu versions 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter.

Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.

Buffer overflow in Opera versions 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

Buffer overflow in ISMail 1.4.3 and earlier allows remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.

In the default configuration of Majordomo 2.0 through 1.94.4, the which_access variable is set to 'open', allowing remote attackers to identify the email addresses of mailing list members via a 'which' command.

Bastille B.02.00.00 on HP-UX 11.00 and 11.11 improperly configures the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

A stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon versions 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.