CVE Vulnerability Catalog

SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field.

The Backup and Restore Utility for Unix (BRU) version 17.0 and earlier has a buffer overflow that allows local users to execute arbitrary code via a long command line argument.

CVE-2003-0585 describes an SQL injection vulnerability in the login.asp file of Brooky eStore versions 1.0.1 through 1.0.2b. It allows remote attackers to bypass authentication and execute arbitrary SQL code via the (1) user or (2) pass parameters.

Buffer overflow in the Client Detection Tool (cdt.dll) plugin for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.

SQL injection vulnerabilities in the PostgreSQL and MySQL authentication modules for teapop 0.3.5 and earlier allow attackers to execute arbitrary SQL and possibly gain privileges.

Brooky eStore versions 1.0.1 through 1.0.2b allow remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php.

The admin.php file in Digi-ads 1.1 has a vulnerability that allows remote attackers to bypass authentication by using a cookie with the username set to the administrator's name. The condition in admin.php does not require a correct password.

Buffer overflow in uvadmsh in IBM U2 UniVerse 10.0.0.9 and earlier allows the uvadm user to execute arbitrary code via a long -uv.install command line argument.

Buffer overflow in LeapFTP 2.7.3.600 allows remote FTP servers to execute arbitrary code via a long IP address response to a PASV request.

The mailcap file for mozart 1.2.5 and earlier allows Oz applications to be passed to the Oz interpreter, enabling remote attackers to execute arbitrary Oz programs in a MIME-aware client program.

Cisco IOS versions 11.x and 12.0 through 12.2 allow remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

An unknown vulnerability in SGI IRIX versions 6.5.x through 6.5.20, and possibly earlier, allows local users to cause a core dump in scheme and potentially gain privileges via certain environment variables.

Buffer overflow in xbl 1.0k and earlier allows local users to gain privileges via a long -display command line option.

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.

Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument.

Caché Database 5.x installs the file /cachesys/bin/cache with world-writable permissions, allowing local users to gain privileges by modifying the cache and executing it via cuxs.

The password.asp file in Snitz Forums version 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by sending a modified request to password.asp with a different member id.

The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file.

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

An unknown vulnerability in the IPv6 capability in IRIX 6.5.19 causes snoop to process packets as the root user, with unknown implications.