CVE Vulnerability Catalog

Buffer overflow in Tivoli Storage Manager (TSM) versions 3.1 through 5.1 for server and storage agents, and versions 4.2 and 5.1 for TSM Client Acceptor Service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or 1581.

Nortel CVX 1800 is installed with a default 'public' community string, allowing remote attackers to read usernames and passwords and modify the CVX configuration.

CVE-2002-0549 describes cross-site scripting vulnerabilities in Anthill that allow remote attackers to execute scripts as other Anthill users.

The FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's 'FTP PORT' responses, allowing remote attackers to redirect FTP data connections to arbitrary ports, a variant of the 'FTP bounce' vulnerability.

xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, allowing remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems.

Oracle9i database server version 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.

A vulnerability in the RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet.

The PL/SQL module in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.

The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, allowing remote attackers to gain privileges and modify DAD settings.

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.

In FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, local users can access restricted files by closing file descriptors 0, 1, or 2. This may lead to unauthorized reading or writing of data by setuid processes.

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data.

Buffer overflow in University of Washington imap server (uw-imapd) in versions imap-2001 and imap-2001a, as well as earlier versions, allows remote authenticated users to execute arbitrary code via a long BODY request.

Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.

XChat versions 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allow remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING.

The codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts and steal cookies via JavaScript in the IMG tag.

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.

Buffer overflow in Sun AnswerBook2 versions 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.