CVE Vulnerability Catalog

The vulnerability in AppServ 2.5.x and earlier versions consists of a default username and password, allowing remote attackers to gain access to the system.

WebCalendar allows remote attackers to gain privileges by modifying critical parameters to view_entry.php or upcoming.php.

The vulnerability in JRun 4.0 involves improper generation and handling of the JSESSIONID, allowing a remote attacker to perform a session fixation attack and hijack a user's HTTP session.

A stack-based buffer overflow in the DecodeBase16 function, used in the IRC module and web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.

A format string vulnerability in the logging function of IGI 2 Covert Strike server version 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.

A buffer overflow vulnerability in the WriteToLog function of JRun web server connectors versions 3.0 through 4.0, such as mod_jrun and mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.

A format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

The vulnerability in Star before version 1.5_alpha46 is that the program does not drop the effective user ID (euid) before calling external programs. This allows local users to gain privileges by modifying the RSH environment variable to point to a malicious program.

Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.

Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from 'memory corruption') via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the '<STYLE>@;/*' string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the 'CSS Heap Memory Corruption Vulnerability.'

A buffer overflow in layer2.c of mpg123 version 0.59r and possibly 0.59s allows remote attackers to execute arbitrary code via a specially crafted MP3 or MP2 file.

Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

A vulnerability in distcc before version 2.16 on 64-bit platforms causes incorrect interpretation of IP-based access control rules. This allows remote attackers to bypass intended restrictions.

The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.

Format string vulnerability in telnetd-ssl version 0.17 and earlier allows remote attackers to execute arbitrary code.

A vulnerability in Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a specially crafted link.

A format string vulnerability in the Speedtouch USB driver before version 1.3.1 allows local users to execute arbitrary code via modem_run, pppoa2, or pppoa3.