CVE-2006-6569

CVE-2006-6569 affects GenesisTrader 1.0. The NVD description documents that form.php allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) do and (2) chem parameters with a "modfich" floap parameter. CVSSv2 metrics report a base score of 7.8 ...

CVE-2006-6566

CVE-2006-6566 affects mxBB 0.91c, specifically the Profile Control Panel (CPanel) module. The vulnerability is a PHP remote file inclusion in includes/profilcp_constants.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the module_root_path parameter. This is a remot...

CVE-2006-6571

GenesisTrader 1.0 is affected by multiple XSS in form.php. The vulnerability allows remote attackers to inject arbitrary script/HTML via the (1) cuve, (2) chem, (3) do parameters. Connected sources also record a CVSS v2 base score of 6.8 (Medium). No remediation details are provided in the suppli...

CVE-2006-6563

Stack-based buffer overflow in the prctrlsrecvrequest function in ctrls.c in the modctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value...

CVE-2006-6105

The CVE-2006-6105 issue affects the GNOME Display Manager (gdm), specifically the host chooser window (gdmchooser). The vulnerability arises from format string handling in a hostname used in an error dialog, allowing a local attacker to execute arbitrary code via crafted input. Reports across mul...

Yahoo Messenger YMailAttach ActiveX control buffer overflow

Overview The Yahoo Messenger YMailAttach ActiveX control contains a buffer overflow, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Yahoo Messenger is an instant messaging application. Yahoo Messenger includes several ActiveX...

CVE-2006-6304

The docoredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to OEXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump...

CVE-2006-6474

The CVE-2006-6474 entry concerns McAfee VirusScan for Linux 4510e and earlier, where the DT_RPATH environment variable includes the current working directory. This insecure DT_RPATH can allow a local attacker to have the dynamic loader load untrusted ELF DSOs and execute arbitrary code by placing...

CVE-2006-6222

Symantec Veritas NetBackup is affected by a stack-based buffer overflow in the bpcd daemon (bpcd.exe) caused by parsing of overly long requests with a malformed length prefix. The vulnerability affects NetBackup 5.0 before MP7, 5.1 before MP6, and 6.0 before MP4. An unauthenticated remote attacke...

CVE-2006-6304

The CVE-2006-6304 issue affects Linux kernel 2.6.19 where do_coredump in fs/exec.c sets the O_EXCL flag but does not use it, enabling a context-dependent attacker to modify arbitrary files via a core-dump rewrite attack. A fix is available in the kernel changelog (2.6.19.1) and related advisories...

CVE-2006-4902

CVE-2006-4902 affects the NetBackup bpcd daemon (bpcd.exe) on Windows, where the daemon fails to properly validate chained commands, enabling a remote attacker to append malicious commands to valid ones and execute arbitrary code. Affected versions include NetBackup 5.0 up to 5.0_MP7, 5.1 up to 5...

CVE-2006-5822

CVE-2006-5822 affects Symantec Veritas NetBackup bpcd daemon (bpcd.exe). The vulnerability is a boundary/buffer overflow in handling overly long CONNECT_OPTIONS requests to NetBackup Master/Media Servers (bpcd listens on 13782/tcp). Exploitation can allow remote code execution with the privileges...

CVE-2006-5822

Stack-based buffer overflow in the NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 allows remote attackers to execute arbitrary code via a long CONNECTOPTIONS request, a different issue than CVE-2006-6222...

CVE-2006-6555

Multiple SQL injection vulnerabilities in EasyFill before 0.5.1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6559

The CVE-2006-6559 entry documents an SQL injection vulnerability in Lotfian Request For Travel 1.0, specifically in ProductDetails.asp where the PID parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: ProductDetails.asp in Lotfian Request For Travel 1.0. Roo...

CVE-2006-6555

The CVE-2006-6555 entry documents multiple SQL injection vulnerabilities in EasyFill versions before 0.5.1 . These allow remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially affecting data confidentiality, integrity, and availability. The provided sources list t...

CVE-2006-6549

CVE-2006-6549 affects Rad Upload 3.02, specifically the upload.php handling of the save_path parameter, which PT Security describes as a potential remote file inclusion risk that could enable arbitrary PHP code execution if a URL is provided in save_path. The vulnerability is tied to how the save...

CVE-2006-6556

The CVE-2006-6556 entry affects EyeOS (EyeHome function in apps/eyeHome.eyeapp/aplic.php) prior to 0.9.3-3. An attacker can remotely upload and execute arbitrary code by using dangerous file extensions that are not all lowercase, which bypasses the input cleansing step. This results in remote cod...

CVE-2006-6561

CVE-2006-6561 is a memory‑corruption vulnerability in Microsoft Word 2000, Word 2002, and Word Viewer 2003 triggered by a crafted DOC file, enabling remote code execution. The issue is demonstrated via the 12122006-djtest.doc file and is related to other Word memory‑corruption CVEs (e.g., CVE-200...

CVE-2006-6554

CVE-2006-6554 affects Kerio MailServer prior to 6.3.1. The issue is a denial-of-service: remote attackers can trigger a segmentation fault and service stoppage by sending certain long LDAP search queries (as demonstrated by vd_kms6.pm). What is affected: Kerio MailServer’s LDAP handling component...