CVE Vulnerability Catalog

Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems do not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.

Buffer overflow in OpenSSL 0.9.7 before version 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.

Buffer overflows in OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via a large client master key in SSL2 or a large session ID in SSL3.

OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, do not properly handle ASCII representations of integers on 64-bit platforms. This could allow attackers to cause a denial of service and possibly execute arbitrary code.

A cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script.

Bugzilla 2.14 before 2.14.2 and 2.16 before 2.16rc2 have cross-site scripting vulnerabilities. Attackers can exploit the full name field to execute scripts in the context of other Bugzilla users.

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434.

The 'Same Origin Policy' (SOP) in Netscape, Mozilla, and Internet Explorer allows a remote web server to access HTTP and SOAP/XML content from restricted sites. An attacker can exploit this vulnerability by mapping the malicious server's DNS domain to the restricted site and passing information between frames.

Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.

CVE-2002-0412 describes a vulnerability in the TraceEvent function in ntop before version 2.1 that allows remote attackers to execute arbitrary code by injecting format strings into calls to the syslog function. This can be done via an HTTP GET request, a username in HTTP authentication, or a password in HTTP authentication.

AeroMail versions before 1.45 have a cross-site scripting vulnerability in message.php, allowing remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.

Multiple buffer overflows in HP Tru64 UNIX allow local users to gain root privileges through commands such as su, chsh, passwd, chfn, dxchpwd, and libc.

eUpload 1.0 stores the password.txt password file in plaintext under the web document root, which allows remote attackers to overwrite arbitrary files by reading password.txt.

Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, making it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.

The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, allowing attackers to connect to the server from the same IP address as a user who has already established a session.

The PPP server in the Red-M 1050 Bluetooth Access Point allows bonded users to cause a denial of service through a long username, potentially leading to arbitrary code execution.