CVE Vulnerability Catalog

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible.

PHPGEDVIEW version 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.

FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

Directory traversal vulnerability in fsp before version 2.81.b18 allows remote users to access files outside the FSP root directory.

The parseAddress code in SquirrelMail 1.4.0 and GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the 'To:' field.

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.

XChat version 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, leading to a null dereference.

CVS server before version 1.11.10 may allow attackers to create directories and files in the file system root directory via malformed module requests.

Multiple unknown vulnerabilities in (1) lpstat and (2) the libprint library in Solaris versions 2.6 through 9 may allow attackers to execute arbitrary code or read and write arbitrary files.

Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.

Buffer overflows in lftp version 2.6.9 and earlier in the try_netscape_proxy and try_squid_eplf functions allow remote HTTP servers to execute arbitrary code via long directory names processed by the ls or rels commands.

Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11 and 5.x before 5.0.5 allows remote attackers to execute arbitrary code via a long password.

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer. This allows local or remote attackers to conduct unauthorized activities via a 'bubba' local user account, an open TCP port 34571, or when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.

Cisco PIX firewall versions 5.x.x and 6.3.1 and earlier are vulnerable to an attack that can cause a crash and reload of the device via an SNMPv3 message when the snmp-server feature is enabled.

The Q.931 dissector in Ethereal before version 0.10.0 and Tethereal allows remote attackers to cause a denial of service (crash) by sending a malformed Q.931 packet, leading to a null dereference.

CVE-2003-0978 describes a format string vulnerability in gpgkeys_hkp, allowing remote attackers or a malicious keyserver to cause a denial of service (crash) and potentially execute arbitrary code during key retrieval.

SQL injection vulnerability in calendar.php in Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.

Buffer overflow vulnerability in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Multiple buffer overflows in SmartFTP 1.0.973 and earlier versions before 1.0.976 allow remote attackers to execute arbitrary code. The attack can be carried out via a long response to a PWD command and a long line in a response to a file LIST command.