CVE Vulnerability Catalog

Vulnerability in cdrecord from cdrtools package before version 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, allowing local users to gain privileges.

The vulnerability in CFPlugIn in the Core Foundation framework in Mac OS X allows user-supplied libraries to be loaded, which could allow local users to gain privileges.

Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code.

The vulnerability in AOL Instant Messenger (AIM) versions 4.3 through 5.5 involves the Buddy icon file being created in a predictable location. A remote attacker can exploit this by using a 'shell:' URI to facilitate the exploitation of other vulnerabilities related to predictable file locations.

PHP remote file inclusion vulnerability in header.php of Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter.

Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute.

The Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.

PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg.

Vulnerability in Baal Smart Forms before version 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.

SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.

An unknown vulnerability in Serviceguard and Cluster Object Manager on HP-UX and HP Linux allows remote attackers to gain unauthorized privileges via unknown attack vectors.

SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the thread_id, parent_id, or mode parameters.

Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code by using a document with a draggable file type (e.g., .xml, .doc, .py, .cdf, .css, .pdf, .ppt) and ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

An unknown local vulnerability in the 'change user' feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors.

Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.

Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.

Serv-U FTP server before version 5.1.0.0 has a default account and password for local administration. A local user can use this account to create a new user, log in as that user, and then execute arbitrary commands using the SITE EXEC command.

Multiple stack-based buffer overflows in Agent Common Services (cam.exe and awservices.exe) in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.

SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.