CVE Vulnerability Catalog

Buffer overflow in OpenSSL 0.9.7 before version 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.

The vulnerability in simpleinit on Linux systems is that it does not close a FIFO file descriptor before creating a child process. This allows the child process to execute arbitrary programs with root privileges.

OpenBSD versions 2.9 through 3.1 allow local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.

In OpenSSH 3.2.2, when using YP with netgroups, there is a possibility that users may successfully authenticate and log in with another user's password under certain conditions.

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to plugin.php, admin.php, or del.php that modifies the PHORUM[settings_dir] variable to point to a directory containing a PHP file with the commands.

Vulnerability in the administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.

OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, do not properly handle ASCII representations of integers on 64-bit platforms. This could allow attackers to cause a denial of service and possibly execute arbitrary code.

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.

Buffer overflow in lsmcode in AIX 4.3.3 may lead to unauthorized access or execution of malicious code.

Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

Buffer overflow in pioout on AIX 4.3.3 may lead to unauthorized access or execution of malicious code.

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients.

Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function.

Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2 improperly handle URL-encoded field names, which may cause certain fields to appear unset. This results in the removal of group permissions on bugs when buglist.cgi is provided with the encoded field names.

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 have cross-site scripting vulnerabilities. Attackers can exploit the full name field to execute scripts in the context of other Bugzilla users.

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses occurs in BIND 4.9.8 and glibc 2.2.5 and earlier. This allows remote malicious DNS servers to execute arbitrary code.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.