CVE Vulnerability Catalog

Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 may be vulnerable to a SQL injection attack, allowing remote attackers to cause a denial of service or execute certain queries via manipulation of the sort order parameter in buglist.cgi.

Buffer overflow in the X11 library (libX11) on Caldera Open UNIX 8.0.0 and UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as dtterm or xterm.

imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as ftp, owwwPath, and oftpPath.

Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long 'bind DN' parameter.

A vulnerability in artsd, invoked by artswrapper, allows local users to gain privileges via format strings in the -a argument, leading to improper handling of an error message in the arts_fatal function.

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the 'pseudo' cookie.

SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.

Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as Name, EMail, or Homepage.

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Cross-site scripting (XSS) vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags in fields such as name, email, AIM screen name, website, location, or message.

CVE-2002-0465 describes a vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier, allowing remote attackers to read and modify arbitrary files and execute commands via a .. (dot dot) in the OpenPath parameter.

csSearch.cgi in version 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, leading to the overwriting of the setup.cgi configuration file.

PostCalendar 3.02 is vulnerable to cross-site scripting, allowing remote attackers to insert arbitrary HTML and scripts by modifying a calendar entry in its preview page.

Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.

The PHP administration script in popper_mod version 1.2.1 and earlier relies on Apache .htaccess authentication, allowing remote attackers to gain privileges if the script is not properly configured by the administrator.

SquirrelMail version 1.2.5 and earlier allows authenticated users to execute arbitrary commands by modifying the THEME variable in a cookie.

The csMailto.cgi program in CGIscript.net allows remote attackers to use it as a 'spam proxy', enabling them to send emails to arbitrary users via modified form-to, form-from, and form-results parameters.

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.

Multiple buffer overflows in HP Tru64 UNIX allow local users to gain root privileges through commands such as su, chsh, passwd, chfn, dxchpwd, and libc.