CVE Vulnerability Catalog

The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, allowing attackers to connect to the server from the same IP address as a user who has already established a session.

Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum. This may allow remote authenticated users to bypass group policies.

Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.

Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, making it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.

Buffer overflow in the management web interface of Red-M 1050 (Bluetooth Access Point) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.

Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.

The PPP server in the Red-M 1050 Bluetooth Access Point allows bonded users to cause a denial of service through a long username, potentially leading to arbitrary code execution.

Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.

The ZCatalog plug-in in Zope versions 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

Pingtel xpressa SIP-based VoIP phones versions 1.2.5 through 1.2.7.4 have a default null administrator password, which could allow remote attackers to gain access to the device.

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.

DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.

Buffer overflow in the bulk insert procedure of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows attackers with database administration privileges to execute arbitrary code via a long filename in the BULK INSERT query.

The web interface for Pingtel xpressa SIP-based VoIP phone versions 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, allowing remote attackers to steal and easily decode passwords via sniffing.

Buffer overflow in the password encryption function of Microsoft SQL Server 2000, including Microsoft SQL Server Desktop Engine (MSDE) 2000, allows remote attackers to gain control of the database and execute arbitrary code via SQL Server Authentication.

Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.

The CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, potentially gaining privileges. This issue occurs in the AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.

The CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

The registry key containing the SQL Server service account information in Microsoft SQL Server 2000 has insecure permissions, allowing local users to gain privileges.

The web interface for the Pingtel xpressa SIP-based VoIP phone versions 1.2.5 to 1.2.7.4 allows authenticated users to modify Call Forwarding settings, potentially leading to call hijacking.