CVE Vulnerability Catalog

Sun AnswerBook2 versions 1.2 through 1.4.2 allow remote attackers to execute administrative scripts such as AdminViewError and AdminAddadmin via a direct request.

Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed source IP address of 127.0.0.1 or network address of 127.0.0.0.

A vulnerability in Cisco AS5350 IOS 12.2(11)T allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an SSH bug. The issue occurs with access control lists (ACLs) applied.

SWAIS version 1.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the search field, as demonstrated using the '|' (pipe) character.

The c-client library in IMAP before version 2002 RC2, used by Pine versions 4.20 to 4.44, allows remote attackers to cause a client crash via a MIME-encoded email with a Content-Type header containing an empty boundary field.

Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.

Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.

The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it. This can allow remote attackers to make it appear that a malicious package comes from a trusted source.

FormMail version 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check, enabling unauthorized activities.

Bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file.

Buffer overflow in the netlog function in pen.c for Pen 0.9.1 and 0.9.2 allows remote attackers to execute arbitrary commands via malformed log messages.

The index.php in Py-Membres 3.1 has a vulnerability that allows remote attackers to log in as an administrator by setting the pymembs parameter to 'admin'.

Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.

The default configuration of MySQL versions 3.20.32 through 3.23.52 on Windows sets the bind address to the loopback interface, allowing remote attackers to connect to the database.

CVE-2002-1885 is a remote file inclusion vulnerability in PowerPhlogger (PPhlogger) versions 2.0.9 through 2.2.2 in showhits.php3, allowing remote attackers to execute arbitrary PHP code via the rel_path parameter.

SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.

mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, resulting in a read/write deadlock between httpd and the CGI script.

The default configuration in MySQL versions 3.20.32 through 3.23.52 on Windows does not have logging enabled, which could allow remote attackers to conduct activities without detection.

Sendmail versions 8.9.0 through 8.12.6 allow remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.

Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.