CVE Vulnerability Catalog

SquirrelMail versions 1.2.7 and earlier have cross-site scripting vulnerabilities that allow remote attackers to execute scripts as other web users. Attacks can be conducted via addressbook.php, options.php, search.php, or help.php.

Wordtrans version 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to execute arbitrary code or conduct cross-site scripting attacks via certain parameters (possibly 'dict') to the wordtrans.php script.

Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode versions 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Buffer overflow in RealJukebox 2 and RealOne Player Gold allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument.

Buffer overflow in Van Dyke SecureCRT SSH client before version 3.4.6 and 4.x before 4.0 beta 3 allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Cisco IOS versions 12.0 through 12.2, when supporting SSH, is vulnerable to an attack that can lead to denial of service through CPU consumption. An attacker can send a large packet designed to exploit the SSH CRC32 attack detection overflow.

CVE-2002-1027 describes a vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0, allowing remote attackers to execute arbitrary web scripts. Attackers can achieve this by linking to 500error.jsp with the script in the et parameter.

Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.

Multiple buffer overflows in Thomas Hauck's Jana Server versions 2.x through 2.2.1 and 1.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code.

Jana Server version 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in RETR or DELE commands to the POP3 server, which exceeds array limits and allows a buffer overflow attack.

Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.

Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.

Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier allows remote attackers to execute arbitrary code via a long database name parameter.

Buffer overflow in Jabber plug-in for Gaim client before version 0.58 allows remote attackers to execute arbitrary code.

Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint versions 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Buffer overflow in traffic_manager for Inktomi Traffic Server versions 4.0.18 through 5.2.2, Traffic Edge versions 1.1.2 and 1.5.0, and Media-IXT version 3.0.4 allows local users to gain root privileges via a long path argument.

login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to 'insert,' which adds the provided username to the adminUsers table.

Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.

Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

The BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.