CVE Vulnerability Catalog

psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the '[B]' sequence, which makes the message appear legitimate.

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.

Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.

Hosting Controller versions 1.1 to 1.4.1 returns different error messages based on whether a valid or invalid username is provided. This allows remote attackers to determine the existence of valid usernames, making it easier to conduct a brute force attack.

The vulnerability in TOLIS Group's Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.

The Safe Mode feature (safe_mode) in PHP from version 3.0 to 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using 'LOAD DATA INFILE LOCAL' SQL statements.

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.

The retrieve_password.pl script in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, allowing remote attackers to request a new password on behalf of another user.

Infopop UBB.Threads version 5.4 and Wired Community Software WWWThreads versions 5.0 through 5.0.9 allow remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends in a different extension.

Cross-site scripting (XSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients. The attack can be carried out via the Title field or a Private Message Box and the image field parameter in pmlite.php.

Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

Cross-site scripting vulnerability in IIS 4.0, 5.0 and 5.1. A remote attacker can execute arbitrary script as other web users via the error message used in a URL redirect ("302 Object Moved") message.

Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.

Lotus Domino Servers 5.x, 4.6x, and 4.5x allow attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.

Zope versions 2.2.0 through 2.5.1 do not properly verify access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.

Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code.

Buffer overflow in the ASP Server-Side Include Function in IIS 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.

Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers, potentially leading to denial of service or execution of arbitrary code.

Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters. Affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.

Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, known as the 'Local Applescript Invocation' vulnerability.