CVE Vulnerability Catalog

Mailman before version 2.0.12 has a cross-site scripting vulnerability that allows remote attackers to execute scripts as other users via a subscriber's list subscription options in the adminpw or info parameters.

Format string vulnerabilities in the Oracle Listener Control utility (lsnrctl) for Oracle versions 9.2, 9.0, 8.1, and 7.3.4 allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.

Buffer overflow in the ToolTalk RPC database server in Common Desktop Environment (CDE) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.

l2tpd version 0.67 does not initialize the random number generator, allowing remote attackers to hijack sessions.

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability was incomplete, allowing remote attackers to gain additional privileges by directly requesting the web management URL.

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.

Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable. This affects components such as csh, dtsession, dxsysinfo, imapd, inc, uucp, uux, rdist, and deliver.

Buffer overflow in HP Tru64 UNIX versions 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable in (1) dxpause, (2) dxconsole, or (3) dtsession.

Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter.

Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long 'bind DN' parameter.

A vulnerability in artsd, invoked by artswrapper, allows local users to gain privileges via format strings in the -a argument, leading to improper handling of an error message in the arts_fatal function.

ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the 'pseudo' cookie.

SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.

imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as ftp, owwwPath, and oftpPath.

Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as Name, EMail, or Homepage.

Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.

Cross-site scripting (XSS) vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags in fields such as name, email, AIM screen name, website, location, or message.

CVE-2002-0465 describes a vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier, allowing remote attackers to read and modify arbitrary files and execute commands via a .. (dot dot) in the OpenPath parameter.

csSearch.cgi in version 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, leading to the overwriting of the setup.cgi configuration file.

Buffer overflow in the X11 library (libX11) on Caldera Open UNIX 8.0.0 and UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as dtterm or xterm.