CVE Vulnerability Catalog

Unspecified vulnerability in Kerio MailServer before version 6.0.3, related to a potential security issue, with unknown impact and unknown remote attack vectors.

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.

Vulnerability in hfaxd in HylaFAX before version 4.2.1, when installed with a weak hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted username or hostname that satisfies a regular expression matched against a hosts.hfaxd entry without a password.

Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before version 1.7-BETA were found. Vulnerabilities exist in the qmail_parseline and sendmail_parseline functions in parser.c, loadconfig and removespaces functions in loadconfig.c, and possibly unspecified functions in functions.c, allowing remote attackers to execute arbitrary code.

Buffer overflow vulnerability in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter in index.php or members.php, or the comment_id parameter in comments.php.

The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.

Fastream NETFile Server 7.1.2 improperly handles keep-alive connection timeouts and does not close the connection after a HEAD request, allowing remote attackers to perform a denial of service (connection consumption) by sending a large number of HTTP HEAD requests.

Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service (panic and reboot) and possibly other impacts via unknown attack vectors, possibly related to unspecified worms.

The vulnerability in the filediff tool in CVStrac allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the rcsinfo parameter.

Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.

Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.

Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow remote attackers to execute arbitrary code via an SSH2 packet with a base argument larger than the mod argument, and malicious servers to cause a denial of service or possibly execute arbitrary code via a large bignum during authentication.

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.

A vulnerability in Novell Client Firewall (NCF) 2.0, based on Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with elevated privileges.

A buffer overflow vulnerability in pop3.c in gnubiff before version 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code.

An unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise version 4.01 and earlier allows remote attackers to cause a denial of service (DoS) via unknown attack vectors when a web site is improperly accessed.

Unspecified vulnerability in MadBMS before version 1.1.5, related to logins, has unknown impact and attack vectors.

Unspecified vulnerability in Jetty HTTP Server, as used in IBM Trading Partner Interchange before 4.2.4 and CA Unicenter Web Services Distributed Management (WSDM) before 3.11, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.