rainbutterfly/cve_corpus huggingface dataset:
CVE-2005-0599 
Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, or 5.1 before 5.1.11.6 allow remote attackers to cause a denial of service (CPU consumption) via malformed IP packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0600 
Cisco devices running Application and Content Networking System (ACNS) 5.0, 5.1 before 5.1.13.7, or 5.2 before 5.2.3.9 allow remote attackers to cause a denial of service (bandwidth consumption) via "crafted IP packets" that are continuously forwarded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0601 
Cisco devices running Application and Content Networking System (ACNS) 4.x, 5.0, 5.1, or 5.2 use a default password when the setup dialog has not been run, which allows remote attackers to gain access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0602 
Unzip 5.51 and earlier does not properly warn the user when extracting setuid or setgid files, which may allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0603 
viewtopic.php in phpBB 2.0.12 and earlier allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax, which reveals the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0604 
lnss.exe in GFI Languard Network Security Scanner 5.0 stores the username and password in memory in plaintext, which could allow local administrators to obtain domain administrator credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0605 
scan.c for LibXPM may allow attackers to execute arbitrary code via a negative bitmap_unit value that leads to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0606 
Cross-site scripting (XSS) vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the (1) cat_id, (2) PHPSESSID, (3) view_doc, (4) product, (5) session, (6) catname, (7) search, or (8) page parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0607 
CubeCart 2.0.0 through 2.0.5 allows remote attackers to determine the full path of the server via direct calls without parameters to (1) information.php, (2) language.php, (3) list_docs.php, (4) popular_prod.php, (5) sale.php, (6) subfooter.inc.php, (7) subheader.inc.php, (8) cat_navi.php, or (9) check_sum.php, which reveals the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0608 
Heap-based buffer overflow in server.cpp for WebMod 0.47 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a POST request with a Content-Length that is less than the amount of data that is actually sent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-01T05:00:00.000Z
CVE-2005-0610 
Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkg_fetch, (2) overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or (3) create arbitrary zero-byte files via the pkgdb.fixme temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-04-13T04:00:00.000Z
CVE-2005-0611 
Heap-based buffer overflow in RealNetworks RealPlayer 10.5 (6.0.12.1056 and earlier), 10, 8, and RealOne Player V2 and V1, allows remote attackers to execute arbitrary code via .WAV files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0612 
Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0613 
Unknown vulnerability in FCKeditor 2.0 RC2, when used with PHP-Nuke, allows remote attackers to upload arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-03T05:00:00.000Z
CVE-2005-0614 
sessions.php in phpBB 2.0.12 and earlier allows remote attackers to gain administrator privileges via the autologinid value in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-03T05:00:00.000Z
CVE-2005-0615 
Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0616 
Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0617 
SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0618 
The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network through an untrusted network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0619 
Einstein 1.0.1 stores sensitive information such as usernames and passwords in plaintext in the registry, which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0620 
Einstein 1.0 stores credit card information in plaintext in the world-readable wallets.dat file, which allows local users to steal the information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0621 
Scrapland 1.0 and earlier allows remote attackers to cause a denial of service (server termination) by triggering an error, which is treated as a fatal error by the server, as demonstrated using (1) signed integers for size values, (2) an invalid model, (3) a "newpos" value that is less than or equal to a size value, or (4) partial packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0622 
RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing (1) . (dot) or (2) space.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0623 
Buffer overflow in RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to execute arbitrary code via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0624 
reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0625 
reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-02T05:00:00.000Z
CVE-2005-0626 
Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-03T05:00:00.000Z
CVE-2005-0627 
Qt before 3.3.4 searches the BUILD_PREFIX directory, which could be world-writable, to load shared libraries regardless of the LD_LIBRARY_PATH environment variable, which allows local users to execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0628 
Multiple cross-site scripting (XSS) vulnerabilities in Forumwa 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the keyword parameter in search.php or the (2) body or (3) subject of a forum message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0629 
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in 427BB 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) Avatar parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0630 
sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0631 
delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0632 
PHP remote file inclusion vulnerability in auth.php in PHPNews 1.2.4 and possibly 1.2.3, allows remote attackers to execute arbitrary PHP code via the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0633 
Buffer overflow in Trillian 3.0 and Pro 3.0 allows remote attackers to execute arbitrary code via a crafted PNG image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0634 
Buffer overflow in Golden FTP Server 1.92 allows remote attackers to execute arbitrary code via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0635 
Buffer overflow in Foxmail Server 2.0 allows remote attackers to execute arbitrary code via a long USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0636 
Format string vulnerability in Foxmail Server 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0637 
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0638 
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0639 
Multiple vulnerabilities in xli before 1.17 may allow remote attackers to execute arbitrary code via "buffer management errors" from certain image properties, some of which may be related to integer overflows in PPM files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0640 
Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 does not properly initialize the "Change Credentials for Database" window, which allows local users to recover the SQL Admin password via certain methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0641 
Cross-site scripting (XSS) vulnerability in the Reporter for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to inject arbitrary HTML or web script via the (1) name or (2) description in a report template.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0642 
SQL injection vulnerability in the Query Designer for Computer Associates (CA) Unicenter Asset Management (UAM) 4.0 allows remote attackers to execute arbitrary SQL via an imported file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0643 
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0644 
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2005-0645 
Cross-site scripting (XSS) vulnerability in show.inc.php in cuteNews 1.3.6 allows remote attackers to inject arbitrary HTML, web script, and PHP code via the (1) CLIENT-IP or (2) X-FORWARDED-FOR header in an HTTP POST request to show_news.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0646 
SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0647 
admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0648 
Multiple vulnerabilities in Pixel-Apes SafeHTML before 1.3.0 allow remote attackers to bypass cross-site scripting (XSS) protection via (1) "decimal HTML entities" or (2) "the \x00 symbol."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0649 
Pixel-Apes SafeHTML before 1.2.1 allows remote attackers to bypass cross-site scripting (XSS) protection via "hexadecimal HTML entities."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0650 
Multiple cross-site scripting (XSS) vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to inject arbitrary web script or HTML via (1) the pages parameter to divers.php (incorrectly referred to as "drivers.php" by some sources), (2) in the search feature text area, (3) forum name, (4) site name or (5) the maximum avatar size in the option section, (5) new category or (6) new forum fields in the forum section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0651 
Multiple SQL injection vulnerabilities in ProjectBB 0.4.5.1 allow remote attackers to execute arbitrary SQL commands via (1) liste or (2) desc parameters to divers.php (incorrectly referred to as "drivers.php" by some sources), (3) the search feature text area, (4) post name in the post creation feature, (5) City, (6) Homepage, (7) ICQ, (8) AOL, (9) Yahoo!, (10) MSN, or (11) e-mail fields in the profile feature or (12) the new field in the moderator section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-04T05:00:00.000Z
CVE-2005-0652 
Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0653 
phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users more privileges than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0654 
gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application crash) via the image descriptor (1) height or (2) width fields set to zero.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0655 
auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2) hal.php, or (3) arsip.php, which reveals the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0656 
Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) hits parameter to hits.php, (2) query parameter to index.php, or (3) theCount parameter to counter.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0657 
Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or cause a denial of service (application crash) via a .. (dot dot) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0658 
SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the category_uid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0659 
phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the path in a PHP error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0660 
Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via certain fields, as demonstrated using the page parameter in nav.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0661 
SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) lastvisit cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0662 
Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0663 
SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0664 
Buffer overflow in the EXIF library (libexif) 0.6.9 does not properly validate the structure of the EXIF tags, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a JPEG image with a crafted EXIF tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-08T05:00:00.000Z
CVE-2005-0665 
Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0666 
Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring, allows local users and possibly remote attackers to bypass intended access restrictions and execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0667 
Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail message with certain headers containing non-ASCII characters that are not properly handled when the user replies to the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0668 
Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as (1) .CAB or (2) .ZIP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0669 
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0670 
Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z
CVE-2005-0671 
Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-07T05:00:00.000Z