CVE Vulnerability Catalog

Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.

Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.

Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.

Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.

CVE-2001-1199 describes a cross-site scripting vulnerability in agora.cgi for Agora versions 3.0a through 4.0g when debug mode is enabled. This allows remote attackers to execute Javascript on other clients via the cart_id parameter.

RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, allowing remote attackers to gain privileges.

The manual.php in Marcus S. Xenakis Unix Manual 1.0 has a vulnerability that allows remote attackers to execute arbitrary code via a URL containing shell metacharacters.

Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields, causing the browser to believe the file is safe to open without prompting the user.

Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.

Buffer overflow in the login service in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

The mailto.exe program in version 1.0.9 and earlier allows remote attackers to send SPAM by modifying hidden form fields such as sendto, email, server, subject, and resulturl.

csvform.pl version 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.

Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.

CesarFTPD version 0.98b has a buffer overflow vulnerability that allows remote attackers to execute arbitrary commands via long arguments to commands such as HELP, USER, PASS, PORT, DELE, REST, RMD, or MKD.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter packet fragments even when the 'fragment' keyword is used in an ACL, allowing remote attackers to bypass intended access controls.

A format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.

Cisco 12000 devices with IOS 12.0 and line cards based on Engine 2 do not properly handle outbound ACLs when input ACLs are not configured on all interfaces of a multi-port line card. This could allow remote attackers to bypass intended access controls.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit 'deny ip any any' rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the 'fragment' keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.