CVE Vulnerability Catalog

An unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System versions 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7 allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

Buffer overflow in Sysinternals Process Explorer 9.23 and earlier versions before 9.25 allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the x or y parameters.

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

Unknown vulnerability in pam_ldap before version 180 improperly handles a new password policy control, which could allow attackers to gain privileges.

The vulnerability in Cisco Clean Access (CCA) versions 3.3.0 to 3.3.9, 3.4.0 to 3.4.5, and 3.5.0 to 3.5.3 is due to improper user authentication when invoking API methods. A remote attacker can exploit this flaw to bypass security checks, change a user's assigned role, or disconnect users.

The vulnerability in nquser.php in Virtual Edge Netquery 3.11 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the host parameter of a dig query.

The vulnerability in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 relies on AUTH_UNIX authentication, which uses user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

A vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects not intended for use within Internet Explorer, as demonstrated using the DDS Library Shape Control (Msdds.dll) and other components.

A buffer overflow vulnerability in servermgrd on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

A buffer overflow vulnerability in Directory Services on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.

A vulnerability in Safari on Mac OS X 10.3.9 and 10.4.2 allows a remote attacker to execute arbitrary commands by opening a specially crafted RTF file. Safari, when rendering RTF files, can directly access URLs without performing standard security checks.

The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with 'Requires Authentication: No' even when the user has selected the 'Require pairing for security' option, which could confuse users about which setting is valid.

Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via kernel headers in a pcap file or data frame dissection, leading to heap-based buffer overflows.

The slpd service in Mac OS X 10.3.9 creates insecure temporary files as root, allowing local users to gain privileges.

Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.

Unspecified vulnerability in Kismet before 2005-08-R1 allows remote attackers to have an unknown impact via unprintable characters in the SSID.

Unknown vulnerability in Mac OS X 10.4.2 and earlier, when using Kerberos authentication with LDAP, allows attackers to gain access to a root Terminal window.

Buffer overflow in ping in Mac OS X 10.3.9 allows local users to execute arbitrary code.