CVE Vulnerability Catalog

CVE-2001-1199 describes a cross-site scripting vulnerability in agora.cgi for Agora versions 3.0a through 4.0g when debug mode is enabled. This allows remote attackers to execute Javascript on other clients via the cart_id parameter.

Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.

Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.

The manual.php in Marcus S. Xenakis Unix Manual 1.0 has a vulnerability that allows remote attackers to execute arbitrary code via a URL containing shell metacharacters.

RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, allowing remote attackers to gain privileges.

Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields, causing the browser to believe the file is safe to open without prompting the user.

Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.

Buffer overflow in the login service in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

The mailto.exe program in version 1.0.9 and earlier allows remote attackers to send SPAM by modifying hidden form fields such as sendto, email, server, subject, and resulturl.

csvform.pl version 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.

Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.

wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.

Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).

Cisco 12000 devices with IOS 12.0 and line cards based on Engine 2 do not properly handle outbound ACLs when input ACLs are not configured on all interfaces of a multi-port line card. This could allow remote attackers to bypass intended access controls.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the 'fragment' keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit 'deny ip any any' rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.

The Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) provided by the client instead of obtaining it from the packet headers, allowing clients to spoof their public IP address, e.g., through Network Address Translation (NAT).

CVE-2001-0857 describes a cross-site scripting vulnerability in status.php3 in Imp Webmail version 2.2.6 and earlier. It allows remote attackers to gain access to other users' emails by hijacking session cookies via the message parameter.

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.