CVE Vulnerability Catalog

CVE-2001-0857 describes a cross-site scripting vulnerability in status.php3 in Imp Webmail version 2.2.6 and earlier. It allows remote attackers to gain access to other users' emails by hijacking session cookies via the message parameter.

Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.

Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via URL encoding the request or directly requesting the ReplicaID.

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

The iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, allowing remote attackers to modify account information in the .htpasswd file via brute force password guessing.

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

6tunnel version 0.08 and earlier does not properly close sockets initiated by a client, allowing remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.

Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, known as the 'Oracle Trace Collection Security Vulnerability.'

Cerberus FTP server versions 1.0 - 1.5 are vulnerable to a denial of service attack that can crash the server due to a large number of 'PASV' requests.

CVE-2001-0824 describes a cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 that allows remote attackers to execute Javascript. Attackers can inject Javascript through requests to .JSP files or the webapp/examples directory, resulting in the injection of code into an error page.

Buffer overflow in internal string handling routines of xinetd before version 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.

Buffer overflows in GazTek ghttpd version 1.4 allow a remote attacker to execute arbitrary code. This issue affects the Log function in util.c and serveconnection in protocol.c, which improperly handle long arguments.

A buffer overflow in Linux fetchmail before version 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.

Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

The lpstat program in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.