CVE Vulnerability Catalog

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.

BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user. This could allow remote authenticated users to gain privileges.

The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, making it easier for remote attackers to gain privileges via brute force password guessing attacks.

CVE-2003-1533 describes an SQL injection vulnerability in accesscontrol.php in PhpPass 2 that allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.

Unspecified vulnerability in Phorum versions 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.

Buffer overflow in the IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.

MAILsweeper for SMTP versions 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that is either (1) corrupt or (2) contains "embedded objects."

Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.

Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default 'superuser' account with the 'planet' password, allowing remote attackers to gain administrative access.

Real Networks RealOne Enterprise Desktop and RealOne Player versions 6.0.11.774, 2.0, and 6.0.11.818 through 6.0.11.853 allow remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.

PHP remote file inclusion vulnerability in hit.php for Kietu versions 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the url_hit parameter.

eMule version 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.

Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.

Buffer overflow in Opera versions 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

The nsr_shutdown function in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file.

Buffer overflow in ISMail 1.4.3 and earlier allows remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.

CVE-2003-1530 is a SQL injection vulnerability in privmsg.php in phpBB version 2.0.3 and earlier. It allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.