CVE Vulnerability Catalog

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.

Buffer overflow in 4D web server 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.

Cisco VPN 3000 Concentrator version 3.6(Rel) and earlier, as well as 2.x.x, allows remote VPN clients to log in using PPTP or IPSEC user authentication when configured to use internal authentication with group accounts and without any user accounts.

Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.

Cisco VPN 3000 Concentrator versions 2.2.x and 3.x before 3.5.1 allows restricted administrators to access user passwords stored in plaintext in HTML source code.

The BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.

Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.

Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a '?' character, which is treated as a wildcard character.

Buffer overflow in traffic_manager for Inktomi Traffic Server versions 4.0.18 through 5.2.2, Traffic Edge versions 1.1.2 and 1.5.0, and Media-IXT version 3.0.4 allows local users to gain root privileges via a long path argument.

BlackICE Agent 3.1.eal does not always reactivate after a system standby, which could allow remote attackers and local users to bypass intended firewall restrictions.

Cross-site scripting (XSS) vulnerability in YaBB.cgi for Yet Another Bulletin Board (YaBB) 1 Gold SP1 and earlier allows remote attackers to execute arbitrary script as other web site visitors via script in the num parameter, which is not filtered in the resulting error message.

login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to 'insert,' which adds the provided username to the adminUsers table.

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files and possibly gain privileges via the (1) pheader or (2) pfooter parameters in the 'Advanced Settings' capability.

Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier allow local users to gain root privileges via long parameters (-U, -D, -P, -S, -N, -u).

Buffer overflow in the Web Messaging daemon for Ipswitch IMail before version 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.

Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with 'icy-'.

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allow remote attackers to execute arbitrary code via format strings that are not properly handled in the functions syserr and error.

CVE-2002-0958 is a cross-site scripting vulnerability in browse.php for PHP(Reactor) 1.2.7 that allows remote attackers to execute scripts as other users via the go parameter in the comments section.

Buffer overflow in HylaFAX faxgetty before version 4.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long line of image data.