CVE Vulnerability Catalog

The rxvt terminal emulator 2.7.8 and earlier allows attackers to modify the window title via a certain character escape sequence, which could lead to inserting it back into the user's command line.

TruBlueEnvironment for MacOS 10.2.3 and earlier allows local users to overwrite or create arbitrary files and gain root privileges by setting a certain environment variable that is used to write debugging information.

Unknown vulnerability in apcupsd before version 3.8.6 and in 3.10.x before 3.10.5 allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

An unknown vulnerability in the CGI module for PHP 4.3.0 allows attackers to access arbitrary files as the PHP user and possibly execute PHP code by bypassing the CGI force redirect settings.

The xterm terminal emulator in XFree86 version 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence. This could lead to the insertion of a malicious sequence back into the command line in the user's terminal.

Apple File Protocol (AFP) in Mac OS X before 10.2.4 allows administrators to log in as other users by using the administrator password.

Buffer overflow in Cisco IOS versions 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.

The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login.

The PostgreSQL auth module for courier version 0.40 and earlier has an SQL injection vulnerability that allows remote attackers to execute SQL code via the user name.

Buffer overflow in Eset Software NOD32 for UNIX before version 1.013 allows local users to execute arbitrary code via a long path name.

The Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.

CVE-2003-0060 describes format string vulnerabilities in the logging routines for MIT Kerberos V5 KDC before version 1.2.5. This allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via format string specifiers in Kerberos principal names.

CVE-2003-0074 describes a format string vulnerability in mpmain.c for plpnfsd of the plptools package that allows remote attackers to execute arbitrary code via the functions debuglog, errorlog, and infolog.

The uml_net tool in the kernel-utils package for Red Hat Linux 8.0 has incorrect setuid root privileges, allowing local users to modify network interfaces, such as changing ARP entries or placing interfaces into promiscuous mode.

Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes.

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, created with the original user's credentials after root uses su.

The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code.

Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter.

Buffer overflow in secure locate (slocate) before version 2.7 allows local users to execute arbitrary code via long command line arguments (-c or -r).

Multiple buffer overflows in Hypermail 2 before version 2.1.6 allow remote attackers to cause a denial of service and possibly execute arbitrary code. The attack can be performed via a long attachment filename or by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname.