CVE Vulnerability Catalog

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long service argument.

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.

The codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts and steal cookies via JavaScript in the IMG tag.

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.

Buffer overflow in Sun AnswerBook2 versions 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.

XChat versions 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allow remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING.

A format string vulnerability in the libnspd.a library in AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.

An unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.

Vulnerability in FTPSRVR in HP MPE/iX versions 6.0 through 7.0 does not properly validate certain FTP commands, allowing attackers to gain privileges.

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login.

Heap overflow in the KTH Kerberos 4 FTP client version 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.

Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.

CVE-2002-0598 describes a format string vulnerability in Foundstone FScan 1.12 that allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.

Cross-site scripting (XSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary scripts and steal cookies from other IcrediBB users via the (1) title or (2) body of posts.

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.

Buffer overflow in the Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.

WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form.