CVE Vulnerability Catalog

Buffer overflow in the vpnclient program for UNIX VPN Client before version 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.

Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.

IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.

The Safe Mode feature (safe_mode) in PHP from version 3.0 to 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using 'LOAD DATA INFILE LOCAL' SQL statements.

The retrieve_password.pl script in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, allowing remote attackers to request a new password on behalf of another user.

Infopop UBB.Threads version 5.4 and Wired Community Software WWWThreads versions 5.0 through 5.0.9 allow remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends in a different extension.

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or RTF. This could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.

PhpSmsSend version 1.0 has a vulnerability that allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.

Cross-site scripting (XSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients. The attack can be carried out via the Title field or a Private Message Box and the image field parameter in pmlite.php.

Hosting Controller versions 1.1 to 1.4.1 returns different error messages based on whether a valid or invalid username is provided. This allows remote attackers to determine the existence of valid usernames, making it easier to conduct a brute force attack.

Buffer overflow in cpr for the SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.

The index.php file in PHP-Nuke version 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

Cross-site scripting (XSS) vulnerability in error.asp for Plumtree Corporate Portal versions 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the 'Description' parameter.

A buffer overflow in GNU Chess (gnuchess) version 5.02 and earlier may occur when the application is used in a manner inconsistent with its design as a single-user application. This may allow local or remote attackers to execute arbitrary code via a long command.

Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.

Buffer overflow in plDaniels ripMime 1.2.6 and earlier, used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment with a long filename.

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the '[B]' sequence, which makes the message appear legitimate.