CVE Vulnerability Catalog

Buffer overflow in the tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.

ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 store the backup agent username and password in cleartext in the aremote.dmp file in the hidden ARCSERVE$ share, allowing local and remote attackers to gain privileges.

eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.

Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters.

Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the LIST, QUOTE SIZE, and QUOTE MDTM commands.

The eManager plugin for Trend Micro InterScan VirusWall has buffer overflow vulnerabilities that can be exploited by remote attackers to execute arbitrary code. The issue affects several CGI programs, including register.dll and ContentFilter.dll.

RSA BSAFE SSL-J versions 3.0, 3.0.1, and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts. This could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.

Outlook Express 6.00 allows remote attackers to execute arbitrary scripts by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run scripts.

Find-By-Content in Mac OS X from version 10.0 to 10.0.4 creates world-readable index files named .FBCIndex in every directory. This allows remote attackers to learn the contents of files in web accessible directories.

speechd versions 0.54 and earlier, using the Festival or rsynth speech synthesis package, allow attackers to execute arbitrary commands via shell metacharacters.

The listrec.pl CGI program by Textor Webmasters Ltd allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.

Bugzilla before version 2.14 does not properly handle untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (XSS) and possibly SQL injection attacks.

Bugzilla before version 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.

Pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.

Bugzilla before 2.14 does not properly restrict access to confidential bugs, allowing users to bypass viewing permissions via modified bug id parameters.

libnss-pgsql in version 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by injecting SQL code into an HTTP request.

nss_postgresql version 0.6.1 and earlier allows a remote attacker to execute arbitrary SQL queries by injecting SQL code into an HTTP request.

Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.

Bugzilla before 2.14 allows users to bypass group security checks by marking a bug as the duplicate of a restricted bug, which adds the user to the CC list of the restricted bug and allows the user to view it.

Bugzilla before version 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading this information from web server logs or by observing the web browser's location bar.