CVE Vulnerability Catalog

A buffer overflow in the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending a large amount of data.

Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

6tunnel version 0.08 and earlier does not properly close sockets initiated by a client, allowing remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, known as the 'Oracle Trace Collection Security Vulnerability.'

CVE-2001-0824 describes a cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 that allows remote attackers to execute Javascript. Attackers can inject Javascript through requests to .JSP files or the webapp/examples directory, resulting in the injection of code into an error page.

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Buffer overflow in internal string handling routines of xinetd before version 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.

Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

A vulnerability in GNATS GnatsWeb versions 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

Cisco 12000 devices with IOS 12.0 and line cards based on Engine 2 do not properly handle outbound ACLs when input ACLs are not configured on all interfaces of a multi-port line card. This could allow remote attackers to bypass intended access controls.

The lpstat program in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via URL encoding the request or directly requesting the ReplicaID.

Buffer overflows in GazTek ghttpd version 1.4 allow a remote attacker to execute arbitrary code. This issue affects the Log function in util.c and serveconnection in protocol.c, which improperly handle long arguments.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the 'fragment' keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit 'deny ip any any' rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.