CVE Vulnerability Catalog

Bastille B.02.00.00 on HP-UX 11.00 and 11.11 improperly configures the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, which could allow remote attackers to verify the existence of system users and expand defined sendmail aliases.

In the default configuration of Majordomo 2.0 through 1.94.4, the which_access variable is set to 'open', allowing remote attackers to identify the email addresses of mailing list members via a 'which' command.

The SIP implementation in multiple dynamicsoft products, including demo products for AppEngine, allows remote attackers to cause a denial of service or execute arbitrary code via crafted INVITE messages.

The SIP implementation in IPTel SIP Express Router 0.8.9 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

The SIP implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages.

Buffer overflow in RealSystem Server 6.x, 7.x, and 8.x, and RealSystem Proxy 8.x, related to URL error handling, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, allowing remote attackers to modify arbitrary registry entries or configuration.

Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.

A vulnerability in KnowledgeBuilder (KnowledgeBase) allows remote attackers to execute arbitrary PHP code by modifying the 'page' parameter to reference a URL on a remote web server containing the code.

The exit.c file in Linux kernel 2.6-test9-CVS was modified to contain a backdoor, allowing local users to elevate their privileges by passing __WCLONE|__WALL to the sys_wait4 function.

Buffer overflow in ISMail 1.4.3 and earlier allows remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.

Buffer overflow in Opera versions 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.

KPopup 0.9.1 has a vulnerability related to trusting the PATH variable when executing the killall command. This allows local users to elevate their privileges by modifying the PATH variable to reference a malicious killall program.

CVE-2003-1171 involves a heap-based buffer overflow in the sec_filter_out function in mod_security versions 1.7RC1 through 1.7.1 in Apache 2. This allows remote attackers to execute arbitrary code via a server-side script that sends a large amount of data.

Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long AUTH command to the POP3 server or AUTHENTICATE command to the IMAP server.

A PHP remote file inclusion vulnerability in index.php for Gallery 1.4 and 1.4-pl1, when running on Windows or in Configuration mode on Unix, allows remote attackers to inject arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.

Buffer overflow in the prepare_reply function in request.c for Mathopd versions 1.2 through 1.5b13, and possibly earlier, allows remote attackers to cause a denial of service (server crash) and potentially execute arbitrary code via an HTTP request with a long path.

X509TrustManager in Java Secure Socket Extension (JSSE) incorrectly calls the isClientTrusted method when determining server trust, leading to improper validation of digital certificates.

Buffer overflow in Opera 7.02 Build 2668 allows remote attackers to crash Opera via a long HTTP request ending in a .ZIP extension.

RTS CryptoBuddy 1.2 and earlier stores bytes 53 through 55 of a 55-byte passphrase in plaintext, which makes it easier for local users to guess the passphrase.