CVE Vulnerability Catalog

Sudo before 1.6.6 contains an off-by-one error that can lead to a heap-based buffer overflow. This allows local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

Buffer overflow in cpr for the SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.

IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.

The Safe Mode feature (safe_mode) in PHP from version 3.0 to 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using 'LOAD DATA INFILE LOCAL' SQL statements.

The retrieve_password.pl script in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, allowing remote attackers to request a new password on behalf of another user.

Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

Webalizer 2.01-06 has a buffer overflow when configured to use reverse DNS lookups. This allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.

Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.

Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.

Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.

Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.

Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.

Cross-site scripting vulnerability in analog before version 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is logged in web logfiles and not properly filtered by analog during display.

CVE-2002-0074 describes a cross-site scripting vulnerability in the Help File search facility for Internet Information Server (IIS) versions 4.0, 5.0, and 5.1. This allows remote attackers to embed scripts into another user's session.

CVE-2002-0159 describes a format string vulnerability in the administration function of Cisco Secure Access Control Server (ACS) for Windows, versions 2.6.x and earlier and 3.x up to 3.01 (build 40). This allows remote attackers to crash the CSADMIN module or execute arbitrary code via format strings in the URL to port 2002.

Icecast versions 1.3.11 and earlier are vulnerable to buffer overflows that allow remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.