CVE Vulnerability Catalog

CVE-2002-1788 describes a format string vulnerability in the nn_exitmsg function in nn versions 6.6.0 through 6.6.3, allowing remote NNTP servers to execute arbitrary code via format strings in server responses.

D-Link DWL-900AP+ Access Point versions 2.1 and 2.2 allow remote attackers to access the TFTP server without authentication, enabling them to read the config.img file containing sensitive information.

EZloader in ChaiVM for HP LaserJet 4500, 4550, 4100, and 8150 does not properly verify JAR signatures for new services, allowing local users to load unauthorized Chai services.

MidiCart PHP, PHP Plus, and PHP Maxi allow remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or access sensitive information via a direct request to admin/credit_card_info.php.

The RPC module in Webmin versions 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.

CVE-2002-2367 describes an off-by-one buffer overflow vulnerability in NEC SOCKS5 version 1.0 r11 and earlier, allowing remote attackers to cause a denial of service and potentially execute arbitrary code via a long hostname.

Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 related to 'unsafe use of temporary files'.

Multiple buffer overflows in the functions tetrinet_inmessage, speclist_add, and config-getthemeinfo in GTetrinet 0.4.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code.

SQL injection vulnerability in ASP Client Check (ASPCC) versions 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field.

The cvsupd.sh script in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.

Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.

Gordano Messaging Server (GMS) Mail 8 only filters email messages for the first recipient, allowing remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.

site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.

The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument.

Buffer overflow in GoAhead WebServer 2.1 allows remote attackers to execute arbitrary code via a long HTTP GET request with a large number of subdirectories.

A signed integer overflow in the bttv_read function in the bttv driver in Linux kernel before 2.4.20 has unknown impact and attack vectors.

SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.

Dispair versions 0.1 and 0.2 allow remote attackers to execute arbitrary shell commands via certain form fields.

The secure_inc.php file in PhotoDB 1.4 has a vulnerability that allows remote attackers to bypass authentication via a specially crafted URL with a large Time parameter and non-empty rmtusername and rmtpassword parameters, along with an accesslevel parameter lower than the required access level for the requested page.

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.