CVE Vulnerability Catalog

In the ext2 and ext3 file system code of Linux kernel 2.6, the xattr.c file incorrectly compares the name_index fields when sharing xattr blocks, which may prevent default ACLs from being applied.

PHP remote file inclusion vulnerability in al_initialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an 'ftp://' URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for 'http' and 'https' URLs.

The vulnerability in WRQ Reflection for Secure IT Windows Server 6.0 (formerly F-Secure SSH server) is that the server processes access and deny lists in a case-sensitive manner, while previous versions were case-insensitive. This may allow remote attackers to bypass restrictions and log in to accounts that should be denied.

phpWebNotes 2.0.0 contains a vulnerability allowing remote code execution via PHP file inclusion. The extract function in php_api.php allows an attacker to modify the $t_path_core variable, leading to the inclusion of an arbitrary PHP file from an external source.

Vulnerability in WRQ Reflection for Secure IT Windows Server 6.0 (formerly F-Secure SSH server) improperly handles renaming of Administrator or Guest accounts after SSH key authentication has been configured, allowing remote attackers to log in using the original account names.

SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors.

Multiple stack-based buffer overflows in University of Minnesota gopher client 3.0.9 allow remote malicious servers to execute arbitrary code via (1) a long "+VIEWS:" reply (VIfromLine function) and (2) certain arguments when launching third party programs (FIOgetargv function).

SQL injection vulnerability in member.php in MyBulletinBoard (MyBB) allows remote attackers to execute arbitrary SQL statements via the fid parameter.

Buffer overflow vulnerability in LeapFTP allows remote attackers to execute arbitrary code via a long Host string in a Site Queue (.lsq) file.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 801 and earlier allow remote attackers to execute arbitrary SQL commands via the c parameter to (1) events.php, (2) index.php, or (3) list.php.

BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, rely on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client.

A heap-based buffer overflow in the Sophos Antivirus Library allows remote attackers to execute arbitrary code via a crafted Visio file with a modified sub record length.

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the custom_welcome_page parameter.

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

Looking Glass 20040427 allows remote attackers to execute arbitrary commands via shell metacharacters in the DNS lookup query field.

BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allow remote attackers to bypass authentication via an unknown attack vector or a NULL (0x00) as a username.

A format string vulnerability in simpleproxy before version 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.

A vulnerability in the Red Hat Enterprise Linux 3 kernel, in the init_dev function in tty_io.c, results from improper clearing of controlling ttys in multi-threaded applications. A local user can exploit this flaw to cause a system crash (denial of service) and potentially gain tty access through attacks that trigger a pointer to a freed structure.

Vulnerability in phpldapadmin before version 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.

Vulnerability in lockmail in maildrop before version 1.5.3. The program does not drop privileges before executing commands, allowing local users to gain privileges via command line arguments.