CVE Vulnerability Catalog

Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (-name and -T) arguments.

CVE-2001-1562 describes a format string vulnerability in nvi before version 1.79 that allows local users to gain privileges via format string specifiers in a filename.

Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.

Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.

The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.

webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.

Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.

The lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.

Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.

Lotus Notes R5 Client version 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.

CVE-2001-1208 describes a format string vulnerability in DayDream BBS that allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.

Ipswitch IMail version 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server. This issue occurs in the aliasadmin and listadm1 CGI programs, which do not properly verify that an administrator is authorized for the target domain.

The default 'basic' security setting in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges.

NAI WebShield SMTP version 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.

Buffer overflow in VanDyke SecureCRT before version 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long username or password.

Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.

Buffer overflows in DayDream BBS versions 2.9 through 2.13 may allow remote attackers to execute arbitrary code via specific control codes.

Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.

DeleGate versions 7.7.0 and 7.7.1 have a cross-site scripting vulnerability. The issue is that scripting commands are not properly quoted in the '403 Forbidden' error page, allowing remote attackers to execute arbitrary Javascript on other clients.