CVE Vulnerability Catalog

The vulnerability in the SpellChecker plugin in DTLink AreaEdit before version 0.4.3 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the 'dictionary' parameter (also known as the 'lang' variable) in the aspell_setup.php file.

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before version 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

Vulnerability in Computer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before build 220_13, and 1.11 before build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

A buffer overflow vulnerability in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.

A buffer overflow in the mutt_decode_xbit function in Handler.c of Mutt 1.5.10 may allow remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.

A vulnerability in the gorum/prod.php script in Zorum 3.5 allows remote attackers to execute arbitrary code by injecting shell metacharacters into the argv parameter.

A buffer overflow vulnerability in the Log-SCR function of WinFtp Server 1.6.8 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via a long request.

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7 allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

The vulnerability in EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 is due to improper verification of authentication tokens. A remote attacker can modify an authentication token to gain unauthorized privilege escalation.

The vulnerability in nquser.php in Virtual Edge Netquery 3.11 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the host parameter of a dig query.

Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the letter parameter in login/member.php or the im_receiver parameter in login/imcenter.php.

An unknown vulnerability in the Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.

The vulnerability in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 relies on AUTH_UNIX authentication, which uses user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via parameters in forums.php, list.php, journal.php, and links.php. The vendor has disputed this issue, stating that variables are properly sanitized.

A vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects not intended for use within Internet Explorer, as demonstrated using the DDS Library Shape Control (Msdds.dll) and other components.

The System Profiler in Mac OS X 10.4.2 labels a Bluetooth device with 'Requires Authentication: No' even when the user has selected the 'Require pairing for security' option, which could confuse users about which setting is valid.

The slpd service in Mac OS X 10.3.9 creates insecure temporary files as root, allowing local users to gain privileges.

Multiple integer underflows in Kismet before 2005-08-R1 allow remote attackers to execute arbitrary code via kernel headers in a pcap file or data frame dissection, leading to heap-based buffer overflows.

Buffer overflow in CoreFoundation in Mac OS X 10.3.9 allows attackers to execute arbitrary code via command line arguments to an application that uses CoreFoundation.

A buffer overflow vulnerability in Directory Services on Mac OS X 10.3.9 and 10.4.2 allows remote attackers to execute arbitrary code during authentication.