CVE Vulnerability Catalog

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.

CVE-2002-0925 describes a format string vulnerability in the mmsyslog function that allows remote attackers to execute arbitrary code. This vulnerability affects mmmail version 0.0.13 and earlier, as well as mmftpd version 0.0.7 and earlier.

CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.

CVE-2002-0916 describes a format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, distributed in Squid 2.4.STABLE6 and earlier. This allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call.

Buffer overflows in the netstd 3.07-17 package allow remote DNS servers to execute arbitrary code via a long FQDN reply. This issue has been observed in utilities such as linux-ftpd, pcnfsd, tftp, traceroute, and from/to.

Multiple buffer overflows in mnews 1.22 and earlier allow a remote NNTP server to execute arbitrary code or local users to gain privileges via long command line arguments or environment variables.

CVE-2002-0913 describes a format string vulnerability in the log_doit function of Slurp NNTP client 1.1.0, allowing a malicious news server to execute arbitrary code on the client via format strings in a server response.

Buffer overflow in Sendmail before version 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.

The SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.

The register.php file in WoltLab Burning Board (wbboard) 1.1.1 uses a limited number of random values for the 'code' parameter, allowing remote attackers to hijack new user accounts via a brute force attack.

phpBB 2.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute Javascript as other phpBB users by injecting malicious code in the [IMG] tag using a http:// address and a double quote.

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs such as amcheck, amgetidx, amtrmidx, createindex-dump, or createindex-gnutar.

Falcon web server version 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a dot.

Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.

In globals.php in PHP Address before version 0.2f, with the allow_url_fopen and register_globals variables enabled, remote attackers can execute arbitrary PHP code via a URL in the LangCookie parameter.

The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, making it easier for an attacker to decrypt the passwords using brute force techniques.

The 3Com OfficeConnect Remote 812 ADSL Router with firmware versions 1.1.9 and 1.1.7 allows remote attackers to bypass port access restrictions by quickly connecting to an approved port and then to the desired port.

Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code.

Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator versions 1.0 and 1.10 allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.