CVE Vulnerability Catalog

eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum. This may allow remote authenticated users to bypass group policies.

Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the 'Skip scanning if Content-length equals 0' option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.

Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript. Attackers can steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.

Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, making it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.

Buffer overflow in Transsoft Broker FTP Server 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . (dot) characters.

Buffer overflow in the management web interface of Red-M 1050 (Bluetooth Access Point) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.

The PPP server in the Red-M 1050 Bluetooth Access Point allows bonded users to cause a denial of service through a long username, potentially leading to arbitrary code execution.

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.

The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, allowing attackers to connect to the server from the same IP address as a user who has already established a session.

Buffer overflow in lprintf and cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.

Smsd in SMS Server Tools (SMStools) before version 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, referred to as a 'string format vulnerability'.

The directory.php script by Marcus S. Xenakis allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.

Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.

The URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).

Yahoo! Messenger version 5.0.0.1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.

The Network Address Translation (NAT) capability for Netfilter ('iptables') 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

CVE-2002-0716 describes a format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 that allows local users to gain privileges via format string specifiers in the file name argument.

The FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, allowing remote attackers to bypass firewall rules or spoof FTP server responses.