CVE Vulnerability Catalog

The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.

The mod_digest_apple module for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's 'href' to the malicious Javascript, then calling execCommand('Refresh') to refresh the page.

Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by modifying the createTextRange or createRange method. Exploitation of these vulnerabilities may lead to unauthorized access to data.

Internet Explorer versions 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.

Buffer overflow vulnerability in the WTHoster and WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename.

Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users with DSA privileges to execute arbitrary code via a long ONCONFIG environment variable.

The default installation of Cisco voice products on IBM servers running OS earlier than 2000.2.6 with the IBM Director Agent does not require authentication, allowing remote attackers to gain administrator privileges by connecting to TCP port 14247.

mpg321 version 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.

Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allow remote web servers to execute arbitrary code via certain long strings.

An unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users and gain privileges.

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible.

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame. When the history.back function is called, this URL is added to the history list and executed in the top window's zone.

Buffer overflow in fsp before version 2.81.b18 allows remote users to execute arbitrary code.

The mremap system call in Linux kernel 2.4.x before version 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, allowing local users to cause a denial of service and possibly gain privileges by remapping a virtual memory area.

A stack-based buffer overflow in vfs_s_resolve_symlink of Midnight Commander (mc) version 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

PHPGEDVIEW version 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.