Vulnerabilities (CVE)

Filtered by CWE-119
Total 12003 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1582 1 Sun 2 Solaris, Sunos 2023-12-10 7.2 HIGH N/A
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
CVE-2003-0903 1 Microsoft 1 Data Access Components 2023-12-10 10.0 HIGH N/A
Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request.
CVE-2002-2368 1 Nec 1 Socks 5 2023-12-10 10.0 HIGH N/A
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
CVE-2003-0819 1 Microsoft 1 Proxy Server 2023-12-10 10.0 HIGH N/A
Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVE-2002-0813 1 Cisco 1 Ios 2023-12-10 7.1 HIGH N/A
Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
CVE-2002-2271 1 Bigfun 1 Bigfun 2023-12-10 5.0 MEDIUM N/A
Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string.
CVE-2003-1369 1 Save It Software Pty 1 Bytecatcherftp 2023-12-10 6.8 MEDIUM N/A
Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP server banner.
CVE-2002-1401 1 Postgresql 1 Postgresql 2023-12-10 6.5 MEDIUM N/A
Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.
CVE-2002-2388 1 Inweb 1 Mail Server 2023-12-10 5.0 MEDIUM N/A
Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.
CVE-2002-1174 1 Fetchmail 1 Fetchmail 2023-12-10 7.5 HIGH N/A
Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function.
CVE-2003-1473 1 Lgames 1 Ltris 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid "games" permission via a long HOME environment variable.
CVE-2003-1518 1 Adiscon 1 Winsyslog 2023-12-10 7.8 HIGH N/A
Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.
CVE-2001-0629 1 Hp 1 Openview Network Node Manager 2023-12-10 10.0 HIGH N/A
HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter.
CVE-2002-1222 1 Cisco 1 Catos 2023-12-10 7.1 HIGH N/A
Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
CVE-2004-0234 8 Clearswift, F-secure, Rarlab and 5 more 13 Mailsweeper, F-secure Anti-virus, F-secure For Firewalls and 10 more 2023-12-10 10.0 HIGH N/A
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
CVE-2003-1445 1 Rarlab 1 Far Manager 2023-12-10 4.6 MEDIUM N/A
Stack-based buffer overflow in Far Manager 1.70beta1 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long pathname.
CVE-2002-1200 1 Oneidentity 1 Syslog-ng 2023-12-10 7.5 HIGH N/A
Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-1999-0349 1 Microsoft 1 Internet Information Server 2023-12-10 7.5 HIGH N/A
A buffer overflow in the FTP list (ls) command in IIS allows remote attackers to conduct a denial of service and, in some cases, execute arbitrary commands.
CVE-1999-0332 1 Microsoft 1 Netmeeting 2023-12-10 7.5 HIGH N/A
Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVE-2003-1455 1 Poptop 1 Pptp Server 2023-12-10 7.2 HIGH N/A
Multiple buffer overflows in the launch_bcrelay function in pptpctrl.c in PoPToP 1.1.4-b1 through PoPToP 1.1.4-b3 allow local users to execute arbitrary code.