CVE Vulnerability Catalog

A vulnerability has been identified in the CRC-32 compensation attack detector in CORE SDI SSH1, allowing remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Buffer overflow in the HTML parser of the Lotus R5 Domino Server before version 5.06 and Domino Client before version 5.05 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed font size specifier.

Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.

The statsconfig.pl script in OmniHTTPd 2.07 has a vulnerability that allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used in a generated Perl script.

Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.

FTP Voyager ActiveX control before version 8.0, when marked as safe for scripting, allows remote attackers to execute arbitrary commands.

An unknown vulnerability in the SMTP server in Lotus Domino versions 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in 'RCPT TO' commands.

Vulnerability in Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration via the default DOCSIS read-write community string.

Multiple buffer overflows in Lexmark MarkVision printer driver programs allow local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.

IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, allowing remote attackers to gain access to the database.

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, allowing remote attackers to guess passwords without detection.

FoolProof 3.9 allows local users to bypass program execution restrictions by downloading restricted executables from another source and renaming them.

Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name.

MailMan Webmail version 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.

The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allow local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages, potentially leading to privilege escalation.

A memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.

The default permissions for the RAS Administration key in Windows NT 4.0 allow local users to execute arbitrary commands by changing the value to point to a malicious DLL.

The common.inc.php file in phpWebLog 0.4.2 improperly initializes the $CONF array, inadvertently setting the password to a single character. This allows remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.

Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request.