CVE Vulnerability Catalog

SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.

CVE-2000-1233 describes an SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7, allowing remote attackers to execute arbitrary SQL queries via the sSQL parameter.

The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, allowing remote attackers to gain system access.

The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, allowing remote authenticated users to bypass file permissions on configuration data files.

Buffer overflow in the HP-UX cstm program allows local users to gain root privileges.

The fstat program in OpenBSD has a format string vulnerability that allows local users to gain root privileges via the PWD environmental variable.

A vulnerability in the pw_error function in the BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

The authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.

FreeBSD version 4.1.1 and earlier, and possibly other BSD-based operating systems, use an insufficient random number generator to generate initial TCP sequence numbers (ISN), allowing remote attackers to spoof TCP connections.

CVE-2000-0996 describes a vulnerability in the su program in OpenBSD that allows local attackers to gain root privileges via a malformed shell.

Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long 'MAIL FROM' or 'RCPT TO' command.

A buffer overflow vulnerability was found in the ncurses library that allows a local user to execute arbitrary commands via long environmental variables such as TERM or TERMINFO_DIRS.

Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.

Buffer overflow in bftp daemon (bftpd) version 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.

Directory traversal vulnerability in the ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data.

Internet Explorer versions prior to 5.5 forwards cached user credentials for a secure web site to insecure pages on the same site. This could allow remote attackers to obtain the credentials by monitoring connections to the web server.

Avirt Mail versions 4.0 and 4.2 are vulnerable to a denial of service attack that may also allow remote execution of arbitrary commands via long 'RCPT TO' or 'MAIL FROM' commands.

CVE-2000-0947 is a format string vulnerability in the cfd daemon in GNU CFEngine before version 1.6.0a11, allowing attackers to execute arbitrary commands via format characters in the CAUTH command.

CVE-2000-0997 describes format string vulnerabilities in the eeprom program in OpenBSD, NetBSD, and possibly other operating systems, allowing local attackers to gain root privileges.