CVE Vulnerability Catalog

Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.

Buffer overflow in the login service in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

The mailto.exe program in version 1.0.9 and earlier allows remote attackers to send SPAM by modifying hidden form fields such as sendto, email, server, subject, and resulturl.

csvform.pl version 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.

Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter packet fragments even when the 'fragment' keyword is used in an ACL, allowing remote attackers to bypass intended access controls.

CesarFTPD version 0.98b has a buffer overflow vulnerability that allows remote attackers to execute arbitrary commands via long arguments to commands such as HELP, USER, PASS, PORT, DELE, REST, RMD, or MKD.

A format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.

Buffer overflow in internal string handling routines of xinetd before version 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.

CVE-2001-0824 describes a cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 that allows remote attackers to execute Javascript. Attackers can inject Javascript through requests to .JSP files or the webapp/examples directory, resulting in the injection of code into an error page.

Cerberus FTP server versions 1.0 - 1.5 are vulnerable to a denial of service attack that can crash the server due to a large number of 'PASV' requests.

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, known as the 'Oracle Trace Collection Security Vulnerability.'

6tunnel version 0.08 and earlier does not properly close sockets initiated by a client, allowing remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

The iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, allowing remote attackers to modify account information in the .htpasswd file via brute force password guessing.

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).