CVE Vulnerability Catalog

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000 has insecure permissions, allowing local users to gain privileges.

Buffer overflow in the bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication.

The ZCatalog plug-in in Zope versions 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.

Pingtel xpressa SIP-based VoIP phones versions 1.2.5 through 1.2.7.4 have a default null administrator password, which could allow remote attackers to gain access to the device.

DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL.

SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server.

InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) space characters in unexpected places.

An off-by-one buffer overflow in the ssl_compat_directive function allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries. This issue affects mod_ssl version 2.8.9 and earlier.

An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges.

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges.

Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, may allow rexec or rsh to run another user's shell, or atrun to change to a different user's directory. This issue may be due to memory allocation failures or an incorrect call to auth_approval().

Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.

Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php.

OpenBSD versions 2.9 and 3.0 have a vulnerability in the mail program that processes the tilde (~) escape character in a message even when not in interactive mode. This could allow local users to gain root privileges via calls to mail in cron.

PHPGroupware version 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack.

xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() function, such as export_fs().

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.