CVE Vulnerability Catalog

Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.

Buffer overflow in xloadimage 4.1 (also known as xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.

Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7, and 8 allows remote attackers to gain root access via a long username.

The #sinclude directive in Embedded Perl (ePerl) version 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive referencing a file with the code.

OpenSSH before 2.9.9 may not properly handle the 'from' option associated with a key in the ~/.ssh/authorized_keys2 file, which could allow remote attackers to login from unauthorized IP addresses.

NetInfo Manager on Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the 'recent items' and 'services' menus, causing the applications to run with root privileges.

Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.

CVE-2001-1460 describes an SQL injection vulnerability in article.php in PostNuke versions 0.62 through 0.64 that allows remote attackers to bypass authentication via the user parameter.

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, allowing remote attackers to hijack sessions of other users.

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of dots or other characters, potentially leading to a buffer overflow and arbitrary code execution.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, allowing remote attackers to hide their activities.

Buffer overflow in Progress database versions 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files specified by the PROMSGS or PROTERMCAP environment variables.

The PAM implementation in /bin/login of the util-linux package before version 2.11 causes a password entry to be rewritten across multiple PAM calls, which could expose one user's credentials to a different user when certain PAM modules like pam_limits are used.

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.