CVE Vulnerability Catalog

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of dots or other characters, potentially leading to a buffer overflow and arbitrary code execution.

Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.

Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, allowing remote attackers to hijack sessions of other users.

Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, allowing remote attackers to hide their activities.

Buffer overflow in Progress database versions 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files specified by the PROMSGS or PROTERMCAP environment variables.

The PAM implementation in /bin/login of the util-linux package before version 2.11 causes a password entry to be rewritten across multiple PAM calls, which could expose one user's credentials to a different user when certain PAM modules like pam_limits are used.

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, allowing remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via various components such as _proapsv, _mprosrv, _mprshut, orarx, sqlcpp, _probrkr, _sqlschema, and _sqldump.

Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.

The pSlash PHP script version 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote websites, using an HTTP request that modifies the includedir variable.

Phormation PHP script version 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote websites, using an HTTP request that modifies the phormationdir variable.

The AWOL PHP script allows remote attackers to include arbitrary files from remote websites via an HTTP request that sets the includedir variable.

The myphpPagetool PHP script version 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote websites, using an HTTP request that modifies the includedir variable.

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.