CVE Vulnerability Catalog

named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."

fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.

IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form variable, which causes IMP to send the file to the attacker as an attachment.

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects.

The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. The attack does not require authentication.

ICQ Web Front HTTPd allows remote attackers to cause a denial of service by requesting a URL that contains a "?" character.

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters. This allows an attacker to cause reporting errors.

A vulnerability in the IP implementation of HP JetDirect printer card Firmware x.08.20 and earlier allows remote attackers to cause a denial of service (printer crash) via a malformed packet. The attack does not require authentication.

Buffer overflow in the FTP service in HP JetDirect printer card Firmware x.08.20 and earlier. A remote attacker can cause a denial of service (printer crash).

Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. This can lead to disclosure of sensitive information.

A vulnerability in Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests. The response includes the real IP address when passive mode is established.

The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory. Remote attackers can read package documentation and obtain system configuration information via an HTTP request for the /doc/packages URL.

The POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid passwords. Remote attackers can determine valid email addresses on the server for SPAM attacks.

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request (aka the "extra leading slash").

PalmOS 3.5.2 and earlier uses weak encryption to store the user password. This allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions. This can lead to system compromise.

The ICQwebmail client for ICQ 2000A creates a world-readable temporary file during login and does not delete it, allowing local users to obtain sensitive information.

Check Point Firewall-1 allows remote attackers to cause a denial of service by sending a large number of malformed fragmented IP packets.