CVE Vulnerability Catalog

SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.

The administration capability for Apple AirPort 802.11 wireless access point devices uses weak encryption (XOR with a fixed key) for protecting authentication credentials, which could allow remote attackers to obtain administrative access via sniffing when the capability is available via Ethernet or non-WEP connections.

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Multiple unknown vulnerabilities in Nessus before version 2.0.6, in libnessus and possibly libnasl. These are different vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373.

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, allowing remote attackers to write arbitrary files into the Plug-ins folder, potentially spreading malware.

Buffer overflow in the file & folder transfer mechanism for IP Messenger for Win versions 2.00 through 2.02 allows remote attackers to execute arbitrary code via file with a long filename, which triggers the overflow when the user saves the file.

Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long MAIL FROM or RCPT TO commands.

Buffer overflow in Prishtina FTP client 1.x allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long FTP banner.

Buffer overflow in KON kon2 version 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.

Multiple buffer overflows in BitchX IRC client 1.0-0c19 and earlier allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long hostnames, nicknames, or channel names.

Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename.

Poster version.two allows remote authenticated users to gain administrative privileges by appending the '|' field separator and an 'admin' value into the email address field.

The ISAPI extension in BadBlue versions 1.7 through 2.2, and possibly earlier, modifies the first two letters of a filename extension after performing a security check. This allows remote attackers to bypass authentication using a filename with a .ats extension instead of a .hts.

Multiple integer overflow vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) Mount and (2) PPP dissectors.

A vulnerability in One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.

Buffer overflow in the IMAP server (IMAPMax) for SmartMax MailMax 5.0.10.8 and earlier allows remote authenticated users to execute arbitrary code via a long SELECT command.

gPS before 1.1.0 does not properly follow the rgpsp connection source acceptation policy as specified in the rgpsp.conf file, which could allow unauthorized remote attackers to connect to rgpsp.

Multiple buffer overflows in gPS before version 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.

The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to admin/admin.shtml containing a leading // (double slash).

Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.