CVE Vulnerability Catalog

Buffer overflow in Web Agent Administration service in web-tools for SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.

Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.

The rlm_smb module in FreeRADIUS 0.9.3 and earlier has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long User-Password attribute.

PeopleSoft PeopleTools versions 8.1x, 8.2x, and 8.4x allow remote attackers to execute arbitrary commands by uploading a file to the IClient Servlet. Attackers can guess the insufficiently random directory name and directly request access to the uploaded file.

Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ';' (semicolon) characters in escape sequences, leading to a buffer overflow.

Integer overflow in the do_brk function for the brk system call in Linux kernel 2.4.22 and earlier allows local users to gain root privileges.

Partition Manager (parmgr) in HP-UX B.11.23 does not properly validate certificates provided by the cimserver, allowing attackers to obtain sensitive data or gain privileges.

Buffer overflow in iwconfig allows local users to execute arbitrary code via a long HOME environment variable.

Buffer overflow in iwconfig, when installed setuid, allows local users to execute arbitrary code via a long OUT environment variable.

Buffer overflow in the WAECHO default service in web-tools in SAP DB before version 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.

Symantec PCAnywhere versions 10.x and 11, when started as a service, allow attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe.

Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro that bypasses the macro security model.

A heap-based buffer overflow exists in rsync before version 2.5.7 when running in server mode. This allows remote attackers to execute arbitrary code and possibly escape the chroot jail.

CVE-2003-0946 describes a format string vulnerability in clamav-milter for Clam AntiVirus versions 0.60 through 0.60p and earlier than 0.65. This allows remote attackers to cause a denial of service and potentially execute arbitrary code via format string specifiers in the email address argument of a 'MAIL FROM' command.

OpenCA versions before 0.9.1.4 incorrectly use certificates in the chain to check the serial number, which could lead to accepting revoked or expired certificates.

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as swinstall and swmodify.

Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as adding new users to a console and adding spurious IDS rules to sensors.

Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ('NetSetup.LOG').

The Web Database Manager in web-tools for SAP DB before version 7.4.03.30 generates predictable session IDs, allowing remote attackers to conduct unauthorized activities.

Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004 do not properly check the length of the 'Macro names' data value, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.