CVE Vulnerability Catalog

pforum version 1.14 and earlier does not explicitly enable PHP magic quotes, allowing remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.

Add2it Mailman Free version 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.

Vulnerability in the XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

The pam_ldap PAM LDAP module before version 144 has a format string vulnerability in the logging function, allowing attackers to execute arbitrary code via format strings in the configuration file name.

Versions of wmtv 0.6.5 and earlier allow local users to modify arbitrary files via a symlink attack on a configuration file.

A cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file.

Ghostscript versions before 6.53 allow attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain. This could allow remote attackers to execute arbitrary script in documents that the user does not expect.

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a 'Browse' function, which runs Explorer with SYSTEM privileges.

The preferences.php file in Simple Internet Publishing System (SIPS) before version 0.3.1 contains a vulnerability that allows remote attackers to gain administrative privileges by injecting a linebreak in the 'theme' field, leading to the Status::admin line being added to the password file.

Buffer overflow in EasyBoard 2000 version 1.27 (also known as EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header.

Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a modified GET command.

Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.

Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions. This could allow remote attackers with access to the ID to gain privileges as that user.

A cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via form fields such as TITLE, DESCRIPTION, EMAIL, and phone numbers.

The default configuration of Arescom NetDSL 800 does not require authentication, allowing remote attackers to cause a denial of service or reconfigure the router.

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".

The web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, enabling the user to change the switch's configuration and modify the administrator password.

CVE-2002-0246 describes a vulnerability in the message catalog library functions in UnixWare 7.1.1 that allows local users to gain privileges by modifying the LC_MESSAGE environment variable. This enables reading other message catalogs containing format strings from setuid programs such as vxprint.