CVE Vulnerability Catalog

Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name.

CVE-2002-0504 is a cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier, where the lack of proper quoting of results from the getLastError method allows remote attackers to execute scripts in other clients via the NFuse_Application parameter in launch.jsp or launch.asp.

The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record. This could make it easier for remote attackers to bypass applications that restrict access based on host names.

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.

CVE-2002-0525 describes format string vulnerabilities in inews and rnews for INN 2.2.3 and earlier. This allows local users and malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.

Watchguard SOHO firewall version 5.0.35 unpredictably disables certain IP restrictions for customized services set before the administrator upgrades to 5.0.35.

EMU Webmail allows local users to execute arbitrary programs via a .. (dot dot) in the HTTP Host header that points to a Trojan horse configuration file.

The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format.

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434.

OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, do not properly handle ASCII representations of integers on 64-bit platforms. This could allow attackers to cause a denial of service and possibly execute arbitrary code.

Buffer overflows in OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via a large client master key in SSL2 or a large session ID in SSL3.

Ethereal versions 0.9.4 and earlier contain buffer overflow vulnerabilities that can be exploited by remote attackers to cause denial of service or execute arbitrary code.

The nslookup.pl CGI script version 1.0 for Linux Directory Penguin allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.

Vulnerability in PureTLS before version 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.

Buffer overflows in fpexec in mod_frontpage before version 1.6.1 may allow attackers to gain root privileges.

Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allow remote attackers to execute arbitrary code. These issues affect the address_match() function in mystring.c and other functions in tolist.c.

PHPNetToolpack version 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.

Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.

Buffer overflow in newt.c of newt windowing library (libnewt) version 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.