CVE Vulnerability Catalog

FreeBSD kernel 4.6 and earlier closes file descriptors 0, 1, and 2 after they have been assigned to /dev/null when the descriptors reference procfs or linprocfs. This could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.

Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via the SOCKS, RSVP, AFS, or LMP dissectors, which can be caused to core dump.

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients.

Internet Explorer versions 5, 5.6, and 6 allow remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature.

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses occurs in BIND 4.9.8 and glibc 2.2.5 and earlier. This allows remote malicious DNS servers to execute arbitrary code.

Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary string.

Buffer overflow in pioout on AIX 4.3.3 may lead to unauthorized access or execution of malicious code.

Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.

Buffer overflow in lsmcode in AIX 4.3.3 may lead to unauthorized access or execution of malicious code.

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434.

Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.

The b2edit.showposts.php file in B2 version 2.0.6pre2 and earlier has a flaw that fails to properly load the b2config.php file in some configurations. This allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server.

Vulnerability in the administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.

Buffer overflow in Sun ONE / iPlanet Web Server versions 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to plugin.php, admin.php, or del.php that modifies the PHORUM[settings_dir] variable to point to a directory containing a PHP file with the commands.