| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Buffer overflow in University of Washington's implementation of IMAP and POP servers. |
| OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user. |
| Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents. |
| Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions. |
| Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue. |
| Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
| List of arbitrary files on Web host via nph-test-cgi script. |
| Buffer overflow in HP-UX newgrp program. |
| IRIX fam service allows an attacker to obtain a list of all files on the server. |
| File creation and deletion, and remote execution, in the BSD line printer daemon (lpd). |
| AnyForm CGI remote execution. |
| Buffer overflow in AIX xdat gives root access to local users. |
| Listening TCP ports are sequentially allocated, allowing spoofing attacks. |
| Buffer overflow in wu-ftp from PASV command causes a core dump. |
| Predictable TCP sequence numbers allow spoofing. |
| pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. |
| Certain configurations of wu-ftp FTP server 2.4 use a _PATH_EXECPATH setting to a directory with dangerous commands, such as /bin, which allows remote authenticated users to gain root access via the "site exec" command. |
| getcwd() file descriptor leak in FTP. |
| Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0. |
| Buffer overflow in AIX libDtSvc library can allow local users to gain root access. |
