CVE Vulnerability Catalog

Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.

CVE-2002-1027 describes a vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0, allowing remote attackers to execute arbitrary web scripts. Attackers can achieve this by linking to 500error.jsp with the script in the et parameter.

Cisco IOS versions 12.0 through 12.2, when supporting SSH, is vulnerable to an attack that can lead to denial of service through CPU consumption. An attacker can send a large packet designed to exploit the SSH CRC32 attack detection overflow.

Buffer overflow in Van Dyke SecureCRT SSH client before version 3.4.6 and 4.x before 4.0 beta 3 allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.

Buffer overflow in RealJukebox 2 and RealOne Player Gold allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument.

Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode versions 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Cross-site scripting vulnerability in the urlcount.cgi script, included in the Lil' HTTP web server, allows remote attackers to execute arbitrary web scripts in other web browsers. The issue arises because requests to urlcount.cgi containing the script are not filtered when the REPORT capability prints the original request.

CVE-2002-1009 describes a cross-site scripting vulnerability in the pbcgi.cgi script, part of the Lil' HTTP web server. This allows remote attackers to execute arbitrary web scripts in other users' browsers via the 'Name' or 'E-mail' parameters.

AnalogX Proxy versions before 4.12 are vulnerable to buffer overflows that allow remote attackers to cause a denial of service and potentially execute arbitrary code. The attack can be performed via a long HTTP request to TCP port 6588 or a long DNS hostname in a SOCKS 4A request to TCP port 1080.

Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.

SunPCi II VNC uses a weak authentication scheme, allowing remote attackers to obtain the VNC password by sniffing the random byte challenge used as the key for encrypted communications.

Buffer overflow in eDonkey 2000 version 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long 'ed2k:' URL.

GeekLog versions 1.3.5 and earlier have cross-site scripting vulnerabilities that allow remote attackers to execute arbitrary scripts. Attacks can be carried out via the url variable in the Link field of a calendar event, the topic parameter in index.php, or the title parameter in comment.php.

Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack.

Cross-site scripting vulnerability in Splatt Forum 3.0 allows remote attackers to execute arbitrary script as other users via an [img] tag with a closing quote followed by the script.

The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, making it easier for an attacker to decrypt the passwords using brute force techniques.

In globals.php in PHP Address before version 0.2f, with the allow_url_fopen and register_globals variables enabled, remote attackers can execute arbitrary PHP code via a URL in the LangCookie parameter.

Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before version 3.0.3C allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.

SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.

The Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext.