CVE Vulnerability Catalog

Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416.

Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted mount or sysfs system calls.

A vulnerability in SurgeLDAP 1.0g (Build 12) and possibly earlier versions before 1.0h allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.

Vulnerability in Baal Smart Forms before version 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service (panic and reboot) and possibly other impacts via unknown attack vectors, possibly related to unspecified worms.

The Webmail, admin, and SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.

Multiple SQL injection vulnerabilities in WowBB Forum 1.61 and 1.65 allow remote attackers to execute arbitrary SQL commands via the sort_by and page parameters in view_user.php, and the forum_id parameter in view_topic.php.

Buffer overflow in the Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall and other products, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

Unknown front page vulnerability with Moodle servers before version 1.3.2, with unknown impact and attack vectors.

Unknown vulnerability in Moodle before version 1.2, related to improper text filtering. The impact and attack vectors are unknown.

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via various parameters in PHP files.

Multiple SQL injection vulnerabilities in Dynix (formerly epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases.

An unknown vulnerability related to the handling of large requests in RAdmin for Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.

Mozilla Firefox before version 1.0 is installed with world-writable permissions on Mac OS X, allowing local users to gain privileges.

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long SRC or NAME attributes in IFRAME, FRAME, and EMBED elements, originally discovered using the mangleme utility, also known as 'the IFRAME vulnerability' or 'HTML Elements Vulnerability'.

SCO OpenServer versions 5.0.5 through 5.0.7 only support Xauthority style access control when logging in using scologin. This allows remote attackers to gain unauthorized access to an X session via other X login methods.

Unknown vulnerability in Moodle before version 1.3.4, related to handling of strings in Moodle texts. Details about impact and attack vectors are unknown.

SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the thread_id, parent_id, or mode parameters.

SQL injection vulnerability in sql.php of the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code by using a document with a draggable file type (e.g., .xml, .doc, .py, .cdf, .css, .pdf, .ppt) and ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.