CVE Vulnerability Catalog

The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, making it easier for remote attackers to gain privileges via brute force password guessing attacks.

The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.

Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

A vulnerability in KnowledgeBuilder (KnowledgeBase) allows remote attackers to execute arbitrary PHP code by modifying the 'page' parameter to reference a URL on a remote web server containing the code.

The SIP implementation in multiple dynamicsoft products, including demo products for AppEngine, allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages.

The SIP implementation in multiple Cisco products, including IP Phone models 7940 and 7960 and IOS versions in the 12.2 train, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

BEA WebLogic Server and Express version 7.0 SP3 may follow certain code execution paths that result in an incorrect current user. This could allow remote authenticated users to gain privileges.

The Xserver for HP-UX 11.22 was not properly built, which introduced a vulnerability that allows local users to gain privileges.

Bastille B.02.00.00 on HP-UX 11.00 and 11.11 improperly configures the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

Buffer overflow in the stmkfont utility of HP-UX from version 10.0 to 11.22 allows local users to gain privileges via a long command line argument.

SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.

rs.F300 for HP-UX versions 10.0 through 11.22 uses the PATH environment variable to find and execute programs like rm while operating at raised privileges. This allows local users to gain elevated privileges by modifying the path to point to a malicious rm program.

Buffer overflow in the remote console (rcon) in Battlefield 1942 versions 1.2 and 1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long user name and password.

D-Link wireless access point DWL-900AP+ versions 2.2, 2.3, and possibly 2.5 allow remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.

The default installation of Trend Micro OfficeScan versions 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.

A heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

Buffer overflow in the SockPrintf function in wu-ftpd 2.6.2 and earlier, when the MAIL_ADMIN option is enabled, may allow remote anonymous users to execute arbitrary code by uploading a file with a long pathname.

The vulnerability in guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

Multiple buffer overflows in SmartFTP 1.0.973 and earlier versions before 1.0.976 allow remote attackers to execute arbitrary code. The attack can be carried out via a long response to a PWD command and a long line in a response to a file LIST command.