CVE Vulnerability Catalog

In config_converters.py in BSCW (Basic Support for Cooperative Work) versions 3.x and earlier than 4.06, remote attackers can execute arbitrary commands via shell metacharacters in the filename during filename conversion.

The default configuration of BSCW (Basic Support for Cooperative Work) in versions 3.x and possibly 4 enables user self-registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.

The installation of Geeklog 1.3 creates an extra group_assignments record that is not properly deleted. This causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could grant that user unintended administrative privileges.

Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.

Allaire Forums versions 2.0.4, 2.0.5 and Forums! versions 3.0 and 3.1 allow remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and email address.

Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.

Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.

Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as Super Methane Brothers, Star War, Kwirk, Clankanoid, and others, via a long HOME environment variable.

Buffer overflow in BlackMoon FTP Server versions 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.

cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument.

Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.

Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.

CDRDAO versions 1.1.4 and 1.1.5 allow local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.

Domain Name Relay Daemon (dnrd) version 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.

The CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.

Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.

Chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, allowing remote attackers to modify files owned by other users, including root.

AOLserver 3.4.2 for Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.