CVE Vulnerability Catalog

The DDE vulnerability in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.

easyScripts easyNews version 1.5 allows remote attackers to obtain the full path of the web root via a view request with an invalid news message id. When the script times out, the path is leaked in a PHP error message.

Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.

PGPMail.pl version 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories.

wu-ftpd version 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.

Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.

Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.

The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

The ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, leading to an infinite loop and core dump when tcpdump prints the packet.

Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. 'ls C:'.

Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.

Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

The Cisco IOS Firewall Feature set, known as Context Based Access Control (CBAC), in IOS versions 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.

CVE-2001-0927 describes a format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop version 1.0.12 and earlier, allowing remote attackers to execute arbitrary code via an argument containing format specifiers passed to the syslog_message and syslog_io_message functions.

Internet Explorer 5.5 and 6.0 allows remote attackers to misrepresent the name of the file in the File Download dialogue box, potentially misleading users into thinking that the file type is safe to download.

ndcgi.exe in Netdynamics versions 4.x through 5.x, and possibly earlier, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field.