CVE Vulnerability Catalog

Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.

The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record. This could make it easier for remote attackers to bypass applications that restrict access based on host names.

CVE-2002-0504 is a cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier, where the lack of proper quoting of results from the getLastError method allows remote attackers to execute scripts in other clients via the NFuse_Application parameter in launch.jsp or launch.asp.

Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name.

The admin.php file in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, allowing remote attackers to bypass authentication and gain privileges by setting the admin cookie to an arbitrary value.

Instant Web Mail versions before 0.60 do not properly filter CR/LF sequences, allowing remote attackers to execute arbitrary POP commands via the id parameter in message.php or modify certain mail message headers via various parameters in write.php.

The traceroute.pl CGI script version 1.0 for Linux Directory Penguin allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.

Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.

ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d allows user 'skank' on machine 'starscream' to become a key manager when the 'first time connection' feature is enabled and before any legitimate administrators have connected.

Standalone Macromedia Flash Player 5.0 before version 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the 'exec' FSCommand.

Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.

CVE-2002-0458 is a cross-site scripting vulnerability in News-TNK version 1.2.1 and earlier that allows remote attackers to execute arbitrary Javascript via the WEB parameter.

Foundry Networks ServerIron switches do not decode URIs when applying 'url-map' rules, which could make it easier for attackers to forward traffic to a different server than intended.

The file filemanager_forms.php in PHProjekt versions 3.1 and 3.1a has a vulnerability that allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 have cross-site scripting vulnerabilities. Attackers can exploit the full name field to execute scripts in the context of other Bugzilla users.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.

Buffer overflow in OpenSSL 0.9.7 before version 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.

Buffer overflows in OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via a large client master key in SSL2 or a large session ID in SSL3.

OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, do not properly handle ASCII representations of integers on 64-bit platforms. This could allow attackers to cause a denial of service and possibly execute arbitrary code.

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434.