CVE Vulnerability Catalog

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.

A cross-site scripting vulnerability in the mini-browser for Winamp versions 2.78 and 2.79 allows remote attackers to execute scripts via an ID3v1 or ID3v2 tag in an MP3 file.

Aprelium Abyss Web Server before version 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, allowing local users with access to the file to gain privileges.

Nortel CVX 1800 is installed with a default 'public' community string, allowing remote attackers to read usernames and passwords and modify the CVX configuration.

The FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's 'FTP PORT' responses, allowing remote attackers to redirect FTP data connections to arbitrary ports, a variant of the 'FTP bounce' vulnerability.

The admin.html file in StepWeb Search Engine (SWS) 2.5 stores passwords in links to manager.pl, allowing remote attackers with access to the admin.html file to gain administrative privileges to SWS.

Demarc PureSecure 1.05 allows remote attackers to gain administrative privileges via a SQL injection attack in a session ID that is stored in the s_key cookie.

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 and 2002 allows remote attackers to execute arbitrary code via long authentication data.

The XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long service argument.

Buffer overflow in Sun AnswerBook2 versions 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.

The codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 has a cross-site scripting vulnerability that allows remote attackers to execute arbitrary scripts and steal cookies via JavaScript in the IMG tag.

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.

XChat versions 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allow remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING.

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long message or IMvironment field.

The HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 is vulnerable to an attack that can lead to denial of service. Remote attackers can perform a port scan of the management IP address, resulting in the telnet service being disabled.

The cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary scripts as other Cobalt users via JavaScript in a URL to (1) service.cgi or (2) alert.cgi.

Windows Media Player version 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf files and other content, even when the file's extension or content type does not specify .wmf. This could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content.