CVE-2006-5794

The CVE-2006-5794 entry refers to an unspecified vulnerability in the sshd Privilege Separation Monitor of OpenSSH up to version 4.4/4.5 that weakens authentication verification and could allow bypass of authentication. As stated, exploitation is believed to require leveraging vulnerabilities in ...

CVE-2006-5745

CVE-2006-5745 describes a memory-corruption vulnerability in the XMLHTTP ActiveX Control (MSXML4) used by Internet Explorer on Windows, enabling remote code execution when an attacker crafts arguments to setRequestHeader in the XMLHTTP 4.0 control. The issue affects Microsoft XML Core Services 4....

CVE-2006-4694

The CVE-2006-4694 entry concerns a vulnerability in Microsoft PowerPoint (Office 2000/XP/2003) where malformed PowerPoint records, specifically NamedShows, are not properly handled. A crafted .PPT file can enable user‑assisted code execution in the context of the logged‑in user, with exploit acti...

CVE-2006-4868

CVE-2006-4868: A stack-based buffer overflow in VGX.dll (VML processing) used by Microsoft Outlook and Internet Explorer on Windows XP SP2 enables remote code execution via a crafted VML rect tag with a long fill parameter. Affected: Internet Explorer/VML handling. Impact per sources: arbitrary c...

CVE-2006-4837

CVE-2006-4837 affects DCP-Portal SE 6.0. The issue is described as multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the root parameter of two scripts: library/lib.php and library/editor/editor.php. A related behavior can trigger fu...

CVE-2006-4000

CVE-2006-4000 affects Barracuda Spam Firewall (BSF) 3.3.01.001–3.3.03.053. The vulnerability is a directory traversal in cgi-bin/preview_email.cgi that allows remote authenticated users to read arbitrary files by supplying a ".." in the file parameter. Related entry CVE-2006-4081 notes that BSF 3...

CVE-2006-3677

Affected software: Mozilla Firefox 1.5.x (before 1.5.0.5) and SeaMonkey before 1.0.3. Root cause: memory corruption/logic flaw from changing window.navigator properties accessed during Java startup, leading to a crash that enables remote code execution. Impact: remote code execution by an attacke...

CVE-2006-2529

The CVE-2006-2529 entry describes a vulnerability in FCKeditor's upload feature: editor/filemanager/upload/php/upload.php does not verify the Type parameter when upload is enabled, allowing remote attackers to upload arbitrary file types. Affected product/version: FCKeditor prior to 2.3 Beta. Imp...

CVE-2006-2492

CVE-2006-2492 is a buffer overflow in Microsoft Word (Office 2000 SP3, XP SP3, 2003 SP1/SP2) and Microsoft Works through 2006 caused by a malformed object pointer. The flaw allows arbitrary code execution and requires user interaction (via opening a crafted Word/Works document). Affected products...

CVE-2006-1547

CVE-2006-1547 affects Apache Struts 1.x before 1.2.9 when used with BeanUtils 1.7. The vulnerability arises from ActionForm handling a multipart/form-data form where a parameter name references getMultipartRequestHandler, granting access to elements in CommonsMultipartRequestHandler and BeanUtils...

CVE-2005-4559

CVE-2005-4559 affects IceWarp Web Mail 5.5.1 (as used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). The issue lies in mail/include.html where default_layout and layout_settings are not properly initialized when an unrecognized HTTP_USER_AGENT is sent. This allows remote att...

CVE-2005-4556

CVE-2005-4556 affects IceWarp Web Mail 5.5.1 (used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). When register_globals is on, remote attackers can exploit PHP remote file include via the lang_settings and language parameters in accounts/inc/include.php and admin/inc/include...

CVE-2005-4558

CVE-2005-4558 affects IceWarp Web Mail 5.5.1 (used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). The issue arises in mail/index.html where the language parameter lang_settings is not properly restricted before storage in the database, allowing remote authenticated users to ...

CVE-2005-4557

CVE-2005-4557 affects IceWarp Web Mail 5.5.1 (as used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1). The issue is a remote inclusion vulnerability: an attacker can cause the system to include arbitrary local files via a null byte (%00) in the lang parameter, likely due to a ...

CVE-2005-3299

The CVE-2005-3299 entry describes a PHP file inclusion (local inclusion) vulnerability in phpMyAdmin 2.6.4 and 2.6.4-pl1, caused by improper validation of the $__redirect parameter in libraries/grab_globals.lib.php, potentially involving the subform array. This allows remote attackers to include ...

CVE-2005-2773

CVE-2005-2773 affects HP OpenView Network Node Manager 6.2 through 7.50. The vulnerability enables remote attackers to execute arbitrary commands by injecting shell metacharacters into parameters handled by CGI scripts (connectedNodes.ovpl, cdpView.ovpl, freeIPaddrs.ovpl, ecscmg.ovpl). Public wri...

CVE-2002-1717

Microsoft Internet Information Services (IIS) 5.1 is affected by CVE-2002-1717, allowing remote attackers to view installation path information via GET requests to /_vti_pvt/access.cnf, /_vti_pvt/botinfs.cnf, /_vti_pvt/bots.cnf, or /_vti_pvt/linkinfo.cnf. OpenVAS/Nessus references confirm this .c...

CVE-2005-0869

phpSysInfo 2.3 is affected by CVE-2005-0869. The issue enables remote attackers to obtain sensitive information by requesting specific PHP files (class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system_header.php, system_footer.php), which...

CVE-2005-0862

CVE-2005-0862 describes multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier. An attacker can cause arbitrary PHP code execution by manipulating the phpbb_root_path, poc_root_path, or sourcedir parameters to various scripts (poc_loginform.php, phpbb/poc.php, phpnuke...

CVE-2004-1464

Cisco IOS Denial-of-Service vulnerability CVE-2004-1464 affects Cisco IOS 12.2(15) and earlier. A specially crafted TCP connection to the Telnet or reverse Telnet port can cause the device to refuse VTY connections, resulting in DoS. Affected component: Telnet service on IOS; root cause is the cr...