CVE Vulnerability Catalog

Buffer overflow in the X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.

The SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.

Mailman before version 2.0.11 has cross-site scripting vulnerabilities that allow remote attackers to execute scripts via (1) the admin login page or (2) the Pipermail index summaries.

An unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.

AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.

Version 3.3.03 and earlier of Snitz Forums 2000 contains a SQL injection vulnerability in members.asp, allowing remote attackers to execute arbitrary code.

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.

Add2it Mailman Free version 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.

Buffer overflows in mpg321 before 0.2.9 allow local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.

Buffer overflow in Netwin WebNews CGI program 1.1 (Webnews.exe) allows remote attackers to execute arbitrary code via a long group argument.

CVE-2002-0308 affects the admin.asp file in AdMentor 2.11, allowing remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.

Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter.

Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, occurring on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets.

In Avenger's News System (ANS) version 2.11 and earlier, the ans.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.

The GetPassword function in function.php of SiteNews versions 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password.

Outlook Express 5.5 and 6.0 on Windows treats a carriage return ('CR') in a message header as a valid carriage return/line feed combination (CR/LF). This could allow remote attackers to bypass virus protection and other filtering mechanisms via a mail message with headers that only contain the CR, causing Outlook to create separate headers.

Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter.

Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) scoadminreg.cgi or (2) service_action.cgi.

The Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator. This allows remote attackers to gain privileges via the username/password combinations.