CVE Vulnerability Catalog

Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.

Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.

The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.

Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.

SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the 'id' parameter in a view operation.

Vulnerability in SalesLogix 6.1 allows remote authenticated users to create arbitrary files and execute code by manipulating the vMME.AttachmentPath or vMME.LibraryPath variables, which are used to specify file write paths.

A directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.

A buffer overflow vulnerability in MailCarrier 2.51 occurs when handling EHLO and possibly HELO commands. A remote attacker can exploit this to execute arbitrary code on the server.

SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator.

Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.

The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.

Vulnerability in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 allows remote attackers to delete or move arbitrary files on the server via the originalfolder and messageid parameters in viewaction.html.

Vulnerability in accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 (and possibly other versions) allows remote attackers to create text files with arbitrary content via the accountid parameter.

Vulnerability in attachment.html of Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.

Buffer overflow in digestmd5.c (CVS release 1.170) of the DIGEST-MD5 SASL plugin for Cyrus-SASL, not included in any official releases, allows remote attackers to execute arbitrary code.

A format string vulnerability in the SetBaseURL function in the AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log.

A stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument.

A buffer overflow vulnerability in the Microsoft WordPerfect 5.x converter for Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.

The vulnerability in Sygate Enforcer 3.5MR1 and earlier allows broadcast traffic to pass before authentication, which could allow remote attackers to bypass filtering rules.

Buffer overflow vulnerability in the MSN protocol plugins (object.c and slp.c) for Gaim before version 0.82. A remote attacker can cause a denial of service and potentially execute arbitrary code via improperly handled MSNSLP protocol messages in a strncpy call.