CVE Vulnerability Catalog

shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the 'page' parameter.

Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.

Baltimore Technologies WEBsweeper 4.02 allows remote attackers to bypass URL blacklist restrictions, enabling connections to unauthorized web servers. Attackers can achieve this by modifying requested URLs using various techniques, such as double slashes or URL encoding.

Vulnerability in screen before version 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.

Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.

shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the 'file' parameter.

The edit_image.php file in Vibechild Directory Manager before version 0.91 has a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.

PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display messages when invalid user IDs are used. This could allow an attacker to mislead the user into believing that a document has been signed by a trusted third party.

The rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file. This could allow local users to gain privileges by reading the copied file while rmuser is running.

Buffer overflow in the smap/smapd and CSMAP daemons for Gauntlet Firewall versions 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.

Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.

In HP-UX 10.26, the login process does not record failed login attempts in /var/adm/btmp, allowing attackers to conduct brute force password guessing attacks without detection.

The keyinit program in S/Key does not require authentication to initialize a one-time password sequence, allowing an attacker with privileges to a user account to create new one-time passwords for use in other activities that may require S/Key authentication, such as sudo.

Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string trap.

The telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.

The ikeyman program in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories. This allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, allowing remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. '0888888'.

Argosoft FRP server version 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary commands by sending a long string to the (1) USER or (2) CWD commands.

The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, allowing remote attackers to gain access to the printer.

Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with a long Authorization header.