CVE Vulnerability Catalog

Unspecified vulnerability in the pcilynx ieee1394 firewire driver in Linux kernel before 2.4.20, related to 'wrap handling'.

Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.

PHProjekt versions 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, allowing remote attackers to bypass authentication for scripts via a request to a .php file containing 'sms' in the URL.

Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.

Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code. These overflows can be triggered by long arguments in various commands and the DISPLAY environment variable.

Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, allowing remote attackers to gain administrative privileges via Telnet or HTTP.

Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a 'variable data type.'

The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.

SSH Secure Shell for Servers versions 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.

Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter.

PostgreSQL uses the username as a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

The CSRF vulnerability in compose.php in SquirrelMail before version 1.2.3 allows remote attackers to send emails as other users by exploiting modified send_to and subject parameters in an IMG URL.

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allow remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, creating a distinct attack vector.

Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field.

Unknown vulnerability in AIX before version 4.0, with unknown attack vectors and unknown impact, referred to as 'security issue'.

Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, allowing remote attackers to gain unauthorized access.

The calendar.php file in vBulletin before version 2.2.0 has a vulnerability that allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.

The Electronic Code Book (ECB) mode in VTun versions 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks. This could allow remote attackers to gain sensitive information.

SSH versions 1 through 3, and possibly other versions, allow local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writable directory and then executing that script to gain normal shell access.

Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf to overwrite the FFGET_FILE variable with a (null) byte.