CVE Vulnerability Catalog

Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) scoadminreg.cgi or (2) service_action.cgi.

The Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator. This allows remote attackers to gain privileges via the username/password combinations.

CVE-2002-0308 affects the admin.asp file in AdMentor 2.11, allowing remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.

Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.

Buffer overflows in mpg321 before 0.2.9 allow local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.

Buffer overflow in Netwin WebNews CGI program 1.1 (Webnews.exe) allows remote attackers to execute arbitrary code via a long group argument.

pforum version 1.14 and earlier does not explicitly enable PHP magic quotes, allowing remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.

Add2it Mailman Free version 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.

CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.

The pam_ldap PAM LDAP module before version 144 has a format string vulnerability in the logging function, allowing attackers to execute arbitrary code via format strings in the configuration file name.

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.

Versions of wmtv 0.6.5 and earlier allow local users to modify arbitrary files via a symlink attack on a configuration file.

Vulnerability in the XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.

Heap-based buffer overflow in the cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Buffer overflows in wmtv version 0.6.5 and earlier may allow local users to gain elevated privileges.

PowerFTP Personal FTP Server versions 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, allowing attackers with access to the file to gain privileges.

Internet Explorer 6 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts via an Extended HTML Form, whose output from the remote server is not properly cleansed.

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.

Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions. This could allow remote attackers with access to the ID to gain privileges as that user.