CVE Vulnerability Catalog

Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035. Remote attackers can cause denial of service or execute arbitrary code via malformed packets.

In Cosmoshop 8.11.106 and earlier, the edit_mailtexte.cgi and bestmail.cgi scripts are vulnerable to directory traversal. A remote administrator can read arbitrary files on the server using ".." sequences in the file parameter.

SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier. Remote attackers can execute arbitrary SQL commands via the artnum parameter.

In BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7, HTTP handlers store usernames and passwords in cleartext in the server log when access to a web application or protected JWS fails. This allows attackers to gain privileges.

An unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly. This could allow attackers to bypass intended security policies.

A heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 may allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.

A directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files by using an encoded drive letter (C:%5C) in a URL.

IBM WebSphere Application Server versions 5.0.2 and 5.1.1, as well as earlier cumulative fixes, allow unauthorized EJB access on Solaris systems via a crafted LTPA token.

DUbanner 3.1 contains a vulnerability in add.asp that allows remote attackers to upload files with arbitrary extensions, including ASP, potentially leading to arbitrary code execution on the server. Client-side restrictions can be easily bypassed.

The vulnerability in freshclam in ClamAV 0.88 and ClamXav 1.0.3h and earlier does not drop privileges before processing the config-file command line option, allowing local users to read portions of arbitrary files when an error message displays the first line of the target file.

An unspecified vulnerability in IBM WebSphere Application Server versions 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 related to HTTP request handlers. Remote attackers can exploit this flaw, but the impact details are unknown.

IBM WebSphere Application Server versions 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in the addNode.log file. This allows attackers to gain privileges.

WebSphere Application Server 5.0.2 and earlier versions store admin and LDAP passwords in plaintext in FFDC logs upon failed login attempts, allowing attackers to gain privileges.

A stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long SSH_MSG_KEXINIT messages, which may overflow when logged.

An unspecified vulnerability in IBM WebSphere Application Server versions 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 related to the administrative console. The impact and attack vectors are unknown.

A stack-based buffer overflow exists in the WeOnlyDo wodSSHServer ActiveX Component versions 1.2.7 and 1.3.3 DEMO, also used in FreeSSHd 1.0.9 and freeFTPd 1.0.10. Remote attackers can exploit a long key exchange algorithm string to execute arbitrary code.

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged using the raydium_log function in log.c or the raydium_console_line_add function in console.c, possibly from a long player name.

In Raydium SVN revision 312 and earlier, the raydium_network_read function in network.c contains a buffer overflow. A remote attacker can send packets with long global variables to the client, allowing arbitrary code execution.

In Outgun 1.0.3 bot 2 and earlier, the leetnet functions (leetnet/rudp.cpp) improperly handle large packets, allowing a remote attacker to cause an exception and interrupt the game (denial of service).

A buffer overflow vulnerability in FileZilla before version 2.2.23 allows remote attackers to execute arbitrary code via unknown attack vectors.