CVE Vulnerability Catalog

SQL injection vulnerability in Spooky Login versions 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.

Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.

Windows 2000 Terminal Services do not properly lock themselves after disconnection when left idle until the screen saver activates. This could allow attackers to gain administrator privileges.

csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.

Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a '..' (dot dot) in the Attachments parameter.

Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass e-mail scanning via a NULL character in the MIME header before the virus.

Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.

PHProjekt versions 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, allowing remote attackers to bypass authentication for scripts via a request to a .php file containing 'sms' in the URL.

Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.

Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document.

An unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.

Symantec Norton AntiVirus 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension, such as .nch or .dbx, and a malicious extension in the Content-Disposition field.

The 'block fragmented IP Packets' option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).

CVE-2002-1788 describes a format string vulnerability in the nn_exitmsg function in nn versions 6.6.0 through 6.6.3, allowing remote NNTP servers to execute arbitrary code via format strings in server responses.

D-Link DWL-900AP+ Access Point versions 2.1 and 2.2 allow remote attackers to access the TFTP server without authentication, enabling them to read the config.img file containing sensitive information.

EZloader in ChaiVM for HP LaserJet 4500, 4550, 4100, and 8150 does not properly verify JAR signatures for new services, allowing local users to load unauthorized Chai services.

The default configuration of Xerox DocuTech 6110 and 6115 running Solaris 8.0 has a large number of unnecessary services enabled, such as RPC and sprayd, which could allow remote attackers to obtain access to the device.

The irssi IRC client version 0.8.4, downloaded after March 14, 2002, may contain a backdoor in the configuration file, allowing remote attackers to access the system.

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address.

The default configurations for DocuTech 6110 and 6115 have an easily guessable administrative password. On Solaris 8.0, the password is 'service!', and on Windows NT, it is 'administ'.