Command injection

The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...

CVE-2010-4695

Removed by vendor...

PT-2010-5205

Name of the Vulnerable Software and Affected Versions Microsoft FTP Service versions 7.0 through 7.5 for Internet Information Services IIS 7.0 and 7.5 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted FTP command. This is due to a...

RealVNC VNC Server ClientCutText Message Memory Corruption

A memory corruption vulnerability has been reported in RealVNC VNC Server. The vulnerability is due to insufficient boundary checks by RealVNC when handling certain messages sent from RealVNC clients. A remote attackerscould exploit this issue by sending a crafted VNC command ot a target server...

CVE-2010-0402

OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service daemon crash or possibly execute arbitrary code via a crafted in-game command...

CVE-2008-7232

Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command...

RTSP Crafted Command Denial of Service

...

CVE-2008-3889

Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used with the Linux 2.6 kernel, leaks epoll file descriptors during execution of "non-Postfix" commands, which allows local users to cause a denial of service application slowdown or exit via a crafted command, as...

Null pointer dereference

ZDaemon 1.08.07 and earlier allows remote attackers to cause a denial of service daemon crash via a crafted type 6 command, which triggers a NULL pointer dereference...

CVE-2008-3314

ZDaemon 1.08.07 and earlier is affected by CVE-2008-3314. A crafted type 6 command can trigger a NULL pointer dereference, allowing remote attackers to cause a denial of service (daemon crash). The NVD entry records a NETWORK attack vector with LOW attack complexity and no authentication required...

Integer overflow

Integer underflow in the dnsnamefromtext function in 1 libdnsnonsecure.a and 2 libdnssecure.a in IBM AIX 5.2 allows local users to gain privileges via a crafted "-y" TSIG key command line argument to dig...

CVE-2007-3381

The GDM daemon in GNOME Display Manager GDM before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not properly handle NULL return values from the gstrsplit function, which allows local users to cause a denial of service persistent daemon crash via a crafted...

BrightStor ARCserve Discovery service 9b command buffer overflow

Added: 12/08/2006 CVE: CVE-2006-6379 BID: 21502 OSVDB: 30775 Background The BrightStor ARCserve Backup server includes a discovery service which listens on ports 41523/TCP and 41524/UDP. Problem A buffer overflow vulnerability in the ASBRDCST.DLL library allows remote attackers to execute arbitra...

CVE-2006-0678

PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service server crash via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553...

CVE-2005-3065

MultiTheftAuto 0.5 patch 1 and earlier allows remote attackers to cause a denial of service application crash via a crafted command 40 that causes a -1 length to be used and triggers an out-of-bounds read...

DEBIAN-CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...