CVE Vulnerability Catalog

A cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via form fields such as TITLE, DESCRIPTION, EMAIL, and phone numbers.

The default configuration of Arescom NetDSL 800 does not require authentication, allowing remote attackers to cause a denial of service or reconfigure the router.

Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".

The web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, enabling the user to change the switch's configuration and modify the administrator password.

CVE-2002-0246 describes a vulnerability in the message catalog library functions in UnixWare 7.1.1 that allows local users to gain privileges by modifying the LC_MESSAGE environment variable. This enables reading other message catalogs containing format strings from setuid programs such as vxprint.

Ghostscript versions before 6.53 allow attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.

Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain. This could allow remote attackers to execute arbitrary script in documents that the user does not expect.

Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a 'Browse' function, which runs Explorer with SYSTEM privileges.

The preferences.php file in Simple Internet Publishing System (SIPS) before version 0.3.1 contains a vulnerability that allows remote attackers to gain administrative privileges by injecting a linebreak in the 'theme' field, leading to the Status::admin line being added to the password file.

Buffer overflow in EasyBoard 2000 version 1.27 (also known as EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header.

Versions of wmtv 0.6.5 and earlier allow local users to modify arbitrary files via a symlink attack on a configuration file.

The pam_ldap PAM LDAP module before version 144 has a format string vulnerability in the logging function, allowing attackers to execute arbitrary code via format strings in the configuration file name.

NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.

Heap-based buffer overflow in the cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Internet Explorer 6 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts via an Extended HTML Form, whose output from the remote server is not properly cleansed.

Buffer overflows in wmtv version 0.6.5 and earlier may allow local users to gain elevated privileges.

Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.

PowerFTP Personal FTP Server versions 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, allowing attackers with access to the file to gain privileges.

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.

Vulnerability in the XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.