CVE Vulnerability Catalog

The cross-site scripting protection for Konqueror in KDE versions 2.2.2 and 3.0 through 3.0.3 does not properly initialize domains on sub-frames and sub-iframes. This can allow remote attackers to execute scripts and steal cookies from subframes that are in other domains.

A class that supports XML in Microsoft Virtual Machine 5.0.3805 and earlier exposes unsafe methods, allowing remote attackers to execute unsafe code via a Java applet.

Buffer overflows in the ApacheBench benchmark support program (ab.c) before version 1.3.27 and Apache 2.x before version 2.0.43 can be exploited by a malicious web server. This may lead to denial of service and potentially allow arbitrary code execution via a long response.

The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16 does not authenticate requests to reset the device, allowing remote attackers to cause a denial of service via a direct request to the device_reset CGI program.

UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, allowing remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.

Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 SE, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via a long parameter to the Alink function or script containing a long argument to the showHelp function.

CVE-2002-0709 describes SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter that allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames.

The HTML Help facility in Microsoft Windows 98, 98 SE, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder. This allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file.

The Web Reports Server for SurfControl SuperScout WebFilter stores the 'scwebusers' username and password file in a web-accessible directory, allowing remote attackers to obtain valid usernames and crack passwords.

Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code via a certain type of web file request.

Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.

Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.

Jana Server versions 2.x through 2.2.1, and 1.4.6 and earlier do not restrict the number of unsuccessful login attempts, making it easier for remote attackers to gain privileges via brute force username and password guessing.

Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint versions 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Cisco VPN 3000 Concentrator versions 2.2.x and 3.x before 3.5.3 introduces an 'HTTPS on Public Inbound (XML-Auto)(forward/in)' rule but sets the protocol to 'ANY', allowing arbitrary traffic to pass through the concentrator.

RealJukebox 2 and RealOne Player Gold allow remote attackers to execute arbitrary script in the Local computer zone by modifying the skin.ini file in an RJS archive. After extraction, the skin.ini file is parsed as HTML by Microsoft-based web readers.

CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files and possibly gain privileges via the (1) pheader or (2) pfooter parameters in the 'Advanced Settings' capability.

Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations.

Signedness error in Jana Server versions 2.x through 2.2.1, and 1.4.6 and earlier allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.