CVE Vulnerability Catalog

Cisco 12000 devices with IOS 12.0 and line cards based on Engine 2 do not properly handle outbound ACLs when input ACLs are not configured on all interfaces of a multi-port line card. This could allow remote attackers to bypass intended access controls.

Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline scripts, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.

The Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) provided by the client instead of obtaining it from the packet headers, allowing clients to spoof their public IP address, e.g., through Network Address Translation (NAT).

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

Buffer overflows in the send_status, kill_print, and chk_fhost functions in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.

Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.

The pmpost program in Performance Co-Pilot (PCP) before version 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, allowing remote attackers to bypass the ACL.

The viralator CGI script in version 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via SNMP and DMI.

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.

A buffer overflow in the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending a large amount of data.

The Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

CVE-2001-0948 is a cross-site scripting (XSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

The ValiCert Enterprise Validation Authority (EVA) Administration Server versions 3.3 through 4.2.1 uses insufficiently random data to generate session tokens and certificates, which may facilitate brute force attacks.

Buffer overflows in the forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) allow remote attackers to execute arbitrary code via long arguments to various parameters. This issue affects versions 3.3 through 4.2.1.

The DDE vulnerability in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.