CVE Vulnerability Catalog

Buffer overflows in EPIC IRC Client (EPIC4) version 1.0.1 allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies not properly handled by the userhost_cmd_returned function or Statusbar capability.

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to admin/admin.shtml containing a leading // (double slash).

Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges.

Multiple buffer overflows in SLWebMail 3 on Windows systems allow remote attackers to cause a denial of service and possibly execute arbitrary code via long Language and CompanyID parameters in various DLL files.

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument.

The 'ICQ Features on Demand' functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, allowing remote attackers to install arbitrary software via a spoofing attack.

A vulnerability in the POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.

Multiple buffer overflows in Floosietek FTGate Pro Mail Server (FTGatePro) version 1.22 allow remote attackers to execute arbitrary code via long MAIL FROM or RCPT TO commands.

Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to execute arbitrary code via a skins file with a URL containing hex-encoded backslash characters (%5C) that causes an executable to be placed in an arbitrary location.

Leksbot version 1.2.3 on Debian GNU/Linux installs KATAXWR with setuid root, allowing local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges.

The GnuPG plugin in kopete before version 0.6.2 does not properly cleanse the command line when executing gpg, allowing remote attackers to execute arbitrary commands.

The admin.php file in miniPortail allows remote attackers to gain administrative privileges by setting the miniPortailAdmin cookie to an 'adminok' value.

The key validation code in GnuPG before version 1.2.2 improperly assesses the validity of keys with multiple user IDs, assigning the highest validity to the most valid user ID. This prevents GnuPG from warning the encrypting user when a user ID lacks a trusted path.

Buffer overflow in catmail for ListProc 8.2.09 and earlier allows remote attackers to execute arbitrary code via a long ULISTPROC_UMASK value.

Cisco VPN 3000 series concentrators and Cisco VPN 3002 Hardware Client versions 3.5.x through 4.0.REL, when enabling IPSec over TCP for a port, allow remote attackers to access the private network without authentication.

Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subject or (2) Date headers.

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.

SLMail 5.1.0.4420 has multiple buffer overflows that can be exploited by remote attackers to execute arbitrary code. The attack can be carried out through long EHLO, XTRN, POPPASSWD arguments, or a long password to the POP3 server.

Happymall versions 4.3 and 4.4 allow remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the normal_html.cgi or member_html.cgi scripts.

In Slackware 9.0, the rc.M script calls quotacheck with the -M option, which causes the filesystem to be remounted and potentially resets security-relevant mount flags such as nosuid, nodev, and noexec.