CVE Vulnerability Catalog

The directory.php script by Marcus S. Xenakis allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.

Buffer overflow in lprintf and cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.

The PPP server in the Red-M 1050 Bluetooth Access Point allows bonded users to cause a denial of service through a long username, potentially leading to arbitrary code execution.

Buffer overflow in Transsoft Broker FTP Server 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . (dot) characters.

Yahoo! Messenger version 5.0.0.1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.

The URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).

The sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.

Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request.

An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.

Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the MSNT auth helper, gopher client, or FTP server directory listing parser.

PHP versions 4.2.0 and 4.2.1 allow remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, leading to improper memory management.

CVE-2002-0702 describes format string vulnerabilities in the logging routines for dynamic DNS code in the ISC DHCP daemon (DHCPD) versions 3 to 3.0.1rc8, with the NSUPDATE option enabled. This allows remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.

The FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, allowing remote attackers to bypass firewall rules or spoof FTP server responses.

CVE-2002-0716 describes a format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 that allows local users to gain privileges via format string specifiers in the file name argument.

The TFTP server for Red-M 1050 (Bluetooth Access Point) cannot be disabled, making it easier for remote attackers to crack the administration password via brute force methods.

Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.

The Network Address Translation (NAT) capability for Netfilter ('iptables') 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

The ZCatalog plug-in in Zope versions 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.

DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.

Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.