CVE Vulnerability Catalog

Vulnerability in Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options handled by iftpmgr.exe.

A buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request.

SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the 'user' parameter in a 'userinfo' action.

Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the 'window injection' vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.

A format string vulnerability in smtp.c in smtp.proxy version 1.1.3 and earlier allows remote attackers to execute arbitrary code by injecting format string specifiers into the client hostname or message-id, which are then processed in a syslog message.

The DSS verification code in Dropbear SSH Server before version 0.43 frees uninitialized variables, which might allow remote attackers to gain access.

Omnicron OmniHTTPd version 3.0a and earlier contains a buffer overflow vulnerability in the handling of the Range header in HTTP GET requests. A remote attacker can exploit this to execute arbitrary code on the server.

An unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP versions 6 and 7 on HP-UX in trusted mode allows attackers to bypass authentication and gain administrator rights.

Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Editing Component (DEC) and Javascript that calls showModalDialog.

Unknown vulnerability in ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication.

The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.

SQL injection vulnerability in the Reviews module of PHP-Nuke versions 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter.

Vulnerability in Axis Network Camera version 2.40 and earlier, and Video Server version 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to CGI scripts, modify system settings, or cause a denial of service (reboot) of the device.

Unspecified vulnerability in Kerio MailServer before version 6.0.3, related to a potential security issue, with unknown impact and unknown remote attack vectors.

Vulnerability in hfaxd in HylaFAX before version 4.2.1, when installed with a weak hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted username or hostname that satisfies a regular expression matched against a hosts.hfaxd entry without a password.

Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before version 1.7-BETA were found. Vulnerabilities exist in the qmail_parseline and sendmail_parseline functions in parser.c, loadconfig and removespaces functions in loadconfig.c, and possibly unspecified functions in functions.c, allowing remote attackers to execute arbitrary code.

Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

Multiple buffer overflows in Gyach Enhanced (Gyach-E) before version 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by sending certain typing statuses or setting the chat room status bar to the current chat room name.

Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument. NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.

SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter.