CVE Vulnerability Catalog

Buffer overflow in Tivoli Storage Manager (TSM) versions 3.1 through 5.1 for server and storage agents, and versions 4.2 and 5.1 for TSM Client Acceptor Service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or 1581.

Aprelium Abyss Web Server before version 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, allowing local users with access to the file to gain privileges.

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.

CVE-2002-0549 describes cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users.

Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments in the /yell command, long lines in the /etc/melange.conf configuration file, long file names, or possibly other attacks.

Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.

The webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.

IBM Informix Web DataBlade 4.12 improperly processes user input, allowing remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.

Buffer overflows in the PL/SQL module in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code. The attack can be carried out through various long HTTP requests and long passwords.

The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, allowing remote attackers to gain privileges and modify DAD settings.

The PL/SQL module in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet.

Oracle9i database server version 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.

In FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, local users can access restricted files by closing file descriptors 0, 1, or 2. This may lead to unauthorized reading or writing of data by setuid processes.

A vulnerability in the RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.

Apache versions 1.3 through 1.3.24 and 2.0 through 2.0.36 are vulnerable to an attack that can lead to denial of service and potentially execute arbitrary code. Attackers can exploit a chunk-encoded HTTP request that causes Apache to use an incorrect size.

The default configuration of the LPRng print spooler in Red Hat Linux 7.0 through 7.3 and Mandrake 8.1 and 8.2 accepts print jobs from arbitrary remote hosts.