CVE Vulnerability Catalog

The web handler for Perl 5.003 on Novell NetWare 5.1 and 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.

Unknown vulnerability in passwd for VVOS HP-UX 11.04, related to 'unexpected behavior'.

CVE-2002-0690 describes a format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 that allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.

The Gateway GS-400 server has a default root password of '0001n' that cannot be changed via the administrative interface, allowing attackers to gain root privileges.

Easy Guestbook CGI programs do not authenticate the administrator, allowing remote attackers to delete entries or reconfigure the Guestbook via direct access to the respective scripts.

Google Toolbar version 1.1.58 and earlier allows remote websites to perform unauthorized toolbar operations, including script execution and file reading in other zones such as 'My Computer'. This is possible by opening a window to tools.google.com or the res: protocol, then modifying the window's location to the toolbar's configuration URL, bypassing the origin verification check.

Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.

Buffer overflow in gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).

The vsftpd FTP daemon in Red Hat Linux 9 is not compiled with TCP wrappers, which prevents it from restricting access as intended.

Multiple buffer overflows in Lotus Domino Web Server before version 6.0.1 allow remote attackers to cause a denial of service or execute arbitrary code. The attack can be carried out through various options in the PresetFields parameter and a long Host header.

The prescan() function in the address parser in Sendmail before version 8.12.9 does not properly handle conversions from char and int types, which can lead to a length check being disabled. This allows attackers to cause a denial of service and potentially execute arbitrary code via a buffer overflow attack.

SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.

Ecartis 1.0.0 (formerly listar) before snapshot 20030227 allows remote attackers to reset passwords of other users by modifying hidden form fields in the HTML page.

Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via close_tunnel and open_tunnel.

gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a 'isc_init1.X' temporary file.

Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.

The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that are URL-encoded with escapes, Unicode, or UTF-8.

Unknown vulnerability in the bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

Heap-based buffer overflow in the NTLMSSP code for Ethereal 0.9.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Buffer overflow in the openlog function for PHP 4.3.1 on Windows operating system, and possibly other OSes, allows remote attackers to cause a crash and possibly execute arbitrary code via a long filename argument.