CVE Vulnerability Catalog

Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase '.JSP' extension instead of the lowercase .jsp extension.

PalmVNC 1.40 and earlier stores passwords in plaintext in the PalmVNCDB, which is backed up to PCs that the Palm is synchronized with. This could allow attackers to gain privileges.

Buffer overflow in Uptime Client (UpClient) 5.0b7, and possibly other versions, allows local users to gain privileges via a long -p argument.

Vignette StoryServer 5 and Vignette V/5 allow remote attackers to read and modify license information and cause a denial of service by directly accessing the /vgn/license template.

The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, allowing local users to gain privileges by reading a plaintext password in the statefile.

Buffer overflow in AnalogX Proxy 4.13 allows remote attackers to execute arbitrary code via a long URL to port 6588.

Multiple buffer overflows in the dbm_open and dbminit functions in Solaris 2.6 through 9 may allow local users to gain root privileges via long arguments to programs like Xsun.

CVE-2003-1086 describes a vulnerability in pMachine Free and pMachine Pro 2.2 and 2.2.1 that allows remote file inclusion. Attackers can execute arbitrary PHP code by modifying the pm_path parameter to point to a URL on a remote server.

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, allowing remote attackers to write arbitrary files into the Plug-ins folder, potentially spreading malware.

Multiple unknown vulnerabilities in Nessus before version 2.0.6, in libnessus and possibly libnasl. These are different vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373.

Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.

Snowblind Web Server 1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP request, which may trigger a buffer overflow.

The IMAP Client, as used in mutt 1.4.1 and Balsa 2.0.10, allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large mailbox size values that cause either integer signedness errors or integer overflow errors.

Buffer overflow in KON kon2 version 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win versions 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.

Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long MAIL FROM or RCPT TO commands.