CVE Vulnerability Catalog

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.

Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.

LogWatch 2.5 allows local users to gain root privileges via a symlink attack, which is a different vulnerability than CVE-2002-0162.

Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.

The vipw program in the util-linux package before version 2.10 causes the /etc/shadow file to be world-readable in some cases, making it easier for local users to perform brute force password guessing.

Oracle Configurator versions before 11.5.7.17.32 and 11.5.6.16.53 allow remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to 'version' or 'host'.

Check Point Firewall-1 versions 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules. This could allow local users to gain privileges or modify the firewall policy.

Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.

The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie.

Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.

Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.

Allaire Forums versions 2.0.4, 2.0.5 and Forums! versions 3.0 and 3.1 allow remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and email address.

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.

The installation of Geeklog 1.3 creates an extra group_assignments record that is not properly deleted. This causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could grant that user unintended administrative privileges.

The default configuration of BSCW (Basic Support for Cooperative Work) in versions 3.x and possibly 4 enables user self-registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.

In config_converters.py in BSCW (Basic Support for Cooperative Work) versions 3.x and earlier than 4.06, remote attackers can execute arbitrary commands via shell metacharacters in the filename during filename conversion.

Buffer overflow in BlackMoon FTP Server versions 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as Super Methane Brothers, Star War, Kwirk, Clankanoid, and others, via a long HOME environment variable.

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.