CVE Vulnerability Catalog

Unspecified vulnerability in Mac OS X before version 10.3.4 related to logging when tracing system calls. The impact and attack vectors are unknown.

Vulnerability in Mozilla before version 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote websites to hijack the user interface using the 'chrome' flag and XUL files.

Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to handling of directory services lookups.

ProFTPD version 1.2.9 incorrectly treats Allow and Deny directives for CIDR based ACL entries, which could allow FTP clients to bypass intended access restrictions.

Multiple buffer overflows in Midnight Commander (mc) before version 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to the use of SSH and reporting errors, has unknown impact and attack vectors.

Heap-based buffer overflow in the SendUidl function in the POP3 capability in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7. A remote POP3 mail server could exploit this vulnerability to execute arbitrary code.

The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.

Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the 'x' option but also exploitable through 'l' and 'v', and fixed in header.c, a different issue than CVE-2004-0771.

Vulnerability in Mozilla 1.6, Firebird 0.7, and Firefox 0.8 browsers allows an attacker to intercept cached passwords for SSL sites. The browsers do not verify that passwords are only sent over SSL encrypted sessions, enabling them to be sent in cleartext to a spoofed site.

The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.

Multiple buffer overflows in krb5_aname_to_localname in MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

Integer overflow in the SOAPParameter object constructor in Netscape version 7.0 and 7.1 and Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.

SQL injection vulnerability in SquirrelMail before version 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, probably via abook_database.php. The impact is unknown but may include database integrity compromise.

Vulnerability in cPanel when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option. The missing --enable-discard-path option causes PHP to use the SCRIPT_FILENAME variable instead of PATH_TRANSLATED to locate and execute a script. This allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script.

A vulnerability in an ActiveX control of Symantec Norton AntiVirus 2004 allows a remote attacker to cause a denial of service through excessive resource consumption and potentially execute arbitrary code.

Multiple buffer overflows in the RTSP client for MPlayer before version 1.0pre4 and xine lib before version 1-rc4 may lead to crashes and potentially allow remote attackers to execute arbitrary code.

In Bugzilla 2.16.3 and earlier, the editproducts.cgi script, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted. This allows users with those privileges to perform unauthorized additions to the next group assigned with the original group ID.

In Bugzilla versions 2.17.3 and 2.17.4, the describecomponents.cgi script does not properly verify group membership, allowing remote attackers to list component descriptions for otherwise restricted products.

Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges.