CVE Vulnerability Catalog

Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long string trap.

In Oracle versions 8.0.5 and 8.1.5, dbsnmp under certain conditions trusts the PATH environment variable to find and execute the chown or chgrp commands. This allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.

The ikeyman program in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories. This allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.

Starfish Truesync Desktop 2.0b, used on the REX 5000 PDA, uses weak encryption to store the user password in a registry key. This allows attackers with access to the registry key to decrypt the password and gain privileges.

Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.

Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.

PostgreSQL authentication modules (mod_auth_pgsql 0.9.5 and mod_auth_pgsql_sys 0.9.4) allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination.

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.

The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server. This allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack.

Netegrity SiteMinder versions 3.6 through 4.5.1 allow remote attackers to bypass filtering via URLs containing Unicode characters.

The dump and dump_lfs commands in NetBSD versions 1.4.x through 1.5.1 do not properly manage privileges, which could allow local users to gain elevated privileges via the RCMD_CMD environment variable.

FormMail.pl in version 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.

The deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.

Sun Chili!Soft version 3.5.2 on Linux and 3.6 on AIX creates default admin credentials in the default installation.

The firmware of the Allied Telesyn AT-AR220e router version 1.08a RC14 with the portmapper and 'Virtual Server' enabled may allow a remote attacker to access mapped services even though individual port mappings may be disabled.

O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ':' character.

Carello E-Commerce version 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.

A vulnerability in the AIF interface in MPE/iX 5.5 through 6.5 on HP3000 allows an attacker to gain additional privileges and access databases via the AIFCHANGELOGON program.