CVE Vulnerability Catalog

Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.

Vulnerability in JSSE 1.0.3 through 1.0.3_2 causes improper validation of the client or server certificate chain, allowing a remote attacker to falsely authenticate peers for SSL/TLS.

A buffer overflow vulnerability in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.

The vulnerability in rexecd for AIX 4.3.3 is due to improper use of a local copy of the pwd structure when calling getpwnam. This may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.

Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as CWD, STOR, MKD, and STAT.

Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.

A buffer overflow in the POP3 server of 1st Class Mail Server 4.0 via an APOP USER command with a long second parameter (digest) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Unknown vulnerability in Tutti Nova versions 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.

Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the sortBy, sortOrder, startReg, U, LastCheck, and R parameters.

The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors.

A directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

SQL injection vulnerability in the announce and notes modules of phpWebSite before version 0.9.3-2. An attacker can remotely execute arbitrary SQL queries, for example via the ANN_id parameter in the announce module.

Vulnerability in Jaws 0.3 allows remote attackers to bypass authentication by sending an HTTP request to admin.php with the 'logged' cookie set to the MD5 hash of a null password, which is compared against the 'logged' session variable in the logged_on function in application.php.

Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5, related to Java applets, have unknown impact and attack vectors, identified as (1) KSPR5YS6GR and (2) KSPR62F4D3.

SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the login or password fields. This issue was later reported to also affect firmware 4.0.34.

PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_path parameter.

SQL injection vulnerability in the sloth TCL script in QuoteEngine before version 1.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Unknown vulnerability in the dotlock implementation in mailutils before version 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.