CVE Vulnerability Catalog

Leksbot version 1.2.3 on Debian GNU/Linux installs KATAXWR with setuid root, allowing local users to gain root privileges by exploiting unknown vulnerabilities related to the escalated privileges.

A vulnerability in the POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format strings in the response to a UIDL command.

The GnuPG plugin in kopete before version 0.6.2 does not properly cleanse the command line when executing gpg, allowing remote attackers to execute arbitrary commands.

SLMail 5.1.0.4420 has multiple buffer overflows that can be exploited by remote attackers to execute arbitrary code. The attack can be carried out through long EHLO, XTRN, POPPASSWD arguments, or a long password to the POP3 server.

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.

Happymall versions 4.3 and 4.4 allow remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the normal_html.cgi or member_html.cgi scripts.

In Slackware 9.0, the rc.M script calls quotacheck with the -M option, which causes the filesystem to be remounted and potentially resets security-relevant mount flags such as nosuid, nodev, and noexec.

Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.

Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, allowing attackers to steal login names and passwords to gain privileges.

Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 allow local users to gain privileges via long arguments to ask, askq, define, assign, and getc.

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges.

An unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.

The ctrlpacket.c file in the PoPToP PPTP server before version 1.1.4-b3 has a vulnerability that allows remote attackers to cause a denial of service by setting the length field to 0 or 1. This leads to a negative value being fed into a read operation, resulting in a buffer overflow.

Kerio Personal Firewall (KPF) version 2.1.4 and earlier allows remote attackers to execute administrator commands by sniffing packets from a valid session and replaying them against the remote administration server.

Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.

The dupatch and setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allow local users to overwrite files and possibly gain root privileges via a symlink attack.

SQL injection vulnerability in the Document Tracking and Administration (DTA) website of Microsoft BizTalk Server 2000 and 2002 allows remote attackers to execute operating system commands via a request to rawdocdata.asp or RawCustomSearchField.asp containing an embedded SQL statement.

Microsoft Internet Explorer versions 5.01, 5.5, and 6.0 improperly check parameters passed during third-party rendering, which could allow remote attackers to execute arbitrary web scripts.

The mod_auth_any package in Red Hat Enterprise Linux 2.1 and other operating systems does not properly escape arguments when calling other programs, allowing attackers to execute arbitrary commands via shell metacharacters.

Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via an HTTP response containing long values in Content-type and Content-encoding fields.