CVE Vulnerability Catalog

Happymall versions 4.3 and 4.4 allow remote attackers to execute arbitrary commands via shell metacharacters in the file parameter for the normal_html.cgi or member_html.cgi scripts.

Buffer overflow in youbin allows local users to gain privileges via a long HOME environment variable.

SLMail 5.1.0.4420 has multiple buffer overflows that can be exploited by remote attackers to execute arbitrary code. The attack can be carried out through long EHLO, XTRN, POPPASSWD arguments, or a long password to the POP3 server.

In Slackware 9.0, the rc.M script calls quotacheck with the -M option, which causes the filesystem to be remounted and potentially resets security-relevant mount flags such as nosuid, nodev, and noexec.

Multiple heap-based buffer overflows in WsMp3 daemon (WsMp3d) 0.0.10 and earlier allow remote attackers to execute arbitrary code via long HTTP requests.

Demarc Puresecure 1.6 stores authentication information for the logging server in plaintext, allowing attackers to steal login names and passwords to gain privileges.

Multiple buffer overflows in kermit in HP-UX 10.20 and 11.00 allow local users to gain privileges via long arguments to ask, askq, define, assign, and getc.

The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges.

An unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.

The ctrlpacket.c file in the PoPToP PPTP server before version 1.1.4-b3 has a vulnerability that allows remote attackers to cause a denial of service by setting the length field to 0 or 1. This leads to a negative value being fed into a read operation, resulting in a buffer overflow.

The plugin.ocx for Internet Explorer 5.01, 5.5, and 6.0 contains a heap-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code via the Load() method.

SQL injection vulnerability in bttlxeForum 2.0 beta 3 and earlier allows remote attackers to bypass authentication via the (1) username and (2) password fields, and possibly other fields.

The handleAccept function in rinetd before version 0.62 does not properly resize the connection list when it becomes full, leading to incorrect array index settings. This allows remote attackers to cause denial of service and potentially execute arbitrary code via a large number of connections.

The gkrellm-newsticker plugin before version 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.

Buffer overflow in the HTTP receiver function (BizTalkHTTPReceive.dll ISAPI) of Microsoft BizTalk Server 2002 allows attackers to execute arbitrary code via a certain request to the HTTP receiver.

A stack-based buffer overflow in Oracle Net Services for Oracle Database Server 9i release 2 and earlier allows attackers to execute arbitrary code via a 'CREATE DATABASE LINK' query containing a long USING parameter.

A buffer overflow in the administrator authentication process for Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to execute arbitrary code via a handshake packet.

Microsoft Internet Explorer versions 5.01, 5.5, and 6.0 improperly check parameters passed during third-party rendering, which could allow remote attackers to execute arbitrary web scripts.

Buffer overflow in PostMethod() function for Monkey HTTP Daemon (monkeyd) 0.6.1 and earlier allows remote attackers to execute arbitrary code via a POST request with a large body.

The dupatch and setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allow local users to overwrite files and possibly gain root privileges via a symlink attack.