CVE Vulnerability Catalog

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via SNMP and DMI.

The pmpost program in Performance Co-Pilot (PCP) before version 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory.

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.

Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.

Buffer overflows in the send_status, kill_print, and chk_fhost functions in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.

The ValiCert Enterprise Validation Authority (EVA) Administration Server versions 3.3 through 4.2.1 uses insufficiently random data to generate session tokens and certificates, which may facilitate brute force attacks.

Buffer overflows in the forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) allow remote attackers to execute arbitrary code via long arguments to various parameters. This issue affects versions 3.3 through 4.2.1.

CVE-2001-0948 is a cross-site scripting (XSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

The Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

The DDE vulnerability in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.

easyScripts easyNews version 1.5 allows remote attackers to obtain the full path of the web root via a view request with an invalid news message id. When the script times out, the path is leaked in a PHP error message.

Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories.

PGPMail.pl version 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.

wu-ftpd version 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.

Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. 'ls C:'.