CVE Vulnerability Catalog

Directory traversal vulnerability in fsp before version 2.81.b18 allows remote users to access files outside the FSP root directory.

The parseAddress code in SquirrelMail 1.4.0 and GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the 'To:' field.

FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

PHPGEDVIEW version 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.

A stack-based buffer overflow in vfs_s_resolve_symlink of Midnight Commander (mc) version 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion.

The mremap system call in Linux kernel 2.4.x before version 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, allowing local users to cause a denial of service and possibly gain privileges by remapping a virtual memory area.

Buffer overflow in fsp before version 2.81.b18 allows remote users to execute arbitrary code.

Internet Explorer versions 5.01 through 6 SP1 allow remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame. When the history.back function is called, this URL is added to the history list and executed in the top window's zone.

Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.

CVS server before version 1.11.10 may allow attackers to create directories and files in the file system root directory via malformed module requests.

Multiple unknown vulnerabilities in (1) lpstat and (2) the libprint library in Solaris versions 2.6 through 9 may allow attackers to execute arbitrary code or read and write arbitrary files.

XChat version 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, leading to a null dereference.

Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request.

The Q.931 dissector in Ethereal before version 0.10.0 and Tethereal allows remote attackers to cause a denial of service (crash) by sending a malformed Q.931 packet, leading to a null dereference.

Buffer overflows in lftp version 2.6.9 and earlier in the try_netscape_proxy and try_squid_eplf functions allow remote HTTP servers to execute arbitrary code via long directory names processed by the ls or rels commands.

CVE-2003-0978 describes a format string vulnerability in gpgkeys_hkp, allowing remote attackers or a malicious keyserver to cause a denial of service (crash) and potentially execute arbitrary code during key retrieval.

Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11 and 5.x before 5.0.5 allows remote attackers to execute arbitrary code via a long password.

Cisco PIX firewall versions 5.x.x and 6.3.1 and earlier are vulnerable to an attack that can cause a crash and reload of the device via an SNMPv3 message when the snmp-server feature is enabled.

Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer. This allows local or remote attackers to conduct unauthorized activities via a 'bubba' local user account, an open TCP port 34571, or when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network.