CVE Vulnerability Catalog

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.

Multiple unknown vulnerabilities in Nessus before version 2.0.6, in libnessus and possibly libnasl. These are different vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373.

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win versions 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.

Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long MAIL FROM or RCPT TO commands.

The Kerberos login authentication feature in Mac OS X, when used with an LDAPv3 server and LDAP bind authentication, may send cleartext passwords to the LDAP server when the AuthenticationAuthority attribute is not set.

The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.

An unknown vulnerability in GNU Ghostscript before version 7.07 allows attackers to execute arbitrary commands, even when -dSAFER is enabled, via a PostScript file that causes the commands to be executed from a malicious print job.

Konqueror Embedded and KDE 2.2.2 and earlier do not validate the Common Name (CN) field for X.509 Certificates, which could allow remote attackers to spoof certificates via a man-in-the-middle attack.

SQL injection vulnerability in register.asp in Snitz Forums 2000 before version 3.4.03, and possibly 3.4.07 and earlier, allows remote attackers to execute arbitrary stored procedures via the Email variable.

The cdrecord program in cdrtools 2.0 has a format string vulnerability that allows local users to gain privileges via format string specifiers in the dev parameter.

The c-client IMAP Client, used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and possibly execute arbitrary code via certain large (1) literal and (2) mailbox size values that cause either integer signedness errors or integer overflow errors.

The IMAP Client for Mozilla 1.3 and 1.4a allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal and mailbox size values that cause either integer signedness errors or integer overflow errors.

Buffer overflow in KON kon2 version 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

L-Forum 2.40 and earlier has a cross-site scripting vulnerability when the 'Enable HTML in messages' option is off. This allows remote attackers to insert arbitrary scripts or HTML via message fields including 'From', 'E-Mail', and 'Subject'.

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

Multiple buffer overflows in ircII 20020912 allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by ctcp_buffer, cannot_join_channel, status_make_printable, create_server_list, and possibly other functions.

EPIC IRC Client (EPIC4) versions pre2.002, pre2.003, and possibly later versions allow remote malicious IRC servers to cause a denial of service (crash) and potentially execute arbitrary code via a CTCP request from a large nickname, leading to incorrect length calculation.

Symantec Raptor Firewalls and other listed models generate easily predictable initial sequence numbers (ISN), allowing remote attackers to spoof connections.