CVE Vulnerability Catalog

The Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system, allowing remote attackers to list file contents of the proxy and execute arbitrary commands via a 'dos' command.

The CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

In config_converters.py in BSCW (Basic Support for Cooperative Work) versions 3.x and earlier than 4.06, remote attackers can execute arbitrary commands via shell metacharacters in the filename during filename conversion.

Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.

cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument.

Domain Name Relay Daemon (dnrd) version 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.

Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites via the PORT command.

Buffer overflow in the index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.

Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.

MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.

AOLserver 3.4.2 for Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.

Apache for Win32 before 1.3.24 and 2.0.x before 2.0.34-beta allows remote attackers to execute arbitrary commands via shell metacharacters (e.g., the | pipe character) provided as arguments to batch (.bat) or .cmd scripts.

The Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation. This affects Microsoft VM build 3802 and earlier, as well as Netscape 6.2.1 and earlier.

The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23 and Apache-SSL before 1.3.22+1.46 does not properly initialize memory, allowing remote attackers to exploit a buffer overflow to execute arbitrary code via a large client certificate signed by a trusted Certificate Authority.

Buffer overflow in Windows Shell allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.

Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.

Multiple CGI scripts in CIDER SHADOW versions 1.5 and 1.6 allow remote attackers to execute arbitrary commands via certain form fields.

Buffer overflow in Low Band Width X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.

Buffer overflow in the admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to the -d command line option or the PRODVERS argument in the .cdtoc file.