CVE Vulnerability Catalog

Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.

CVE-2001-0690 describes a format string vulnerability in Exim that allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.

CVE-2001-0658 describes a cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000. It allows remote attackers to cause other clients to execute certain scripts or read cookies via a malicious script in an improperly quoted URL in an error message.

Symantec/AXENT NetProwler 3.5.x contains several default passwords that could allow remote attackers to access the management tier via the 'admin' password or connect to a MySQL ODBC from the management tier using a blank password.

The SMTP proxy in WatchGuard Firebox (2500 and 4500) versions 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.

Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3 store passwords in plaintext in the 'Rumpus User Database' file in the prefs folder, which could allow attackers to gain privileges on the server.

WFTPD 3.00 R5 has a directory traversal vulnerability that allows a remote attacker to view arbitrary files via a dot dot attack in the CD command.

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added.

Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.

Buffer overflow in line printer daemon (rlpdaemon) in HP-UX versions 10.01 through 11.11 allows remote attackers to execute arbitrary commands.

IIS 5.0 uses relative paths to find system files that will run in-process, allowing local users to gain privileges via a Trojan horse file, known as the 'System file listing privilege elevation' vulnerability.

The tradecli.dll file in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a non-existent file.

Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long username, password, or PASV command.

Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.

Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.

ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a modified dot dot in the CD (CWD) command.

IBM WebSphere Application Server versions 3.02 through 3.53 uses predictable session IDs for cookies, allowing remote attackers to gain privileges of WebSphere users via brute force guessing.