CVE Vulnerability Catalog

A vulnerability in Internet Explorer 3.02 and 4.0 that causes automatic resending of authentication information to the second site during a redirect.

The sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

Squid version 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

CascadeView TFTP server allows local users to gain privileges via a symlink attack.

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

A vulnerability in Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.

Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page.

Perl 5.004_04 and earlier follows symbolic links when running with the -e option, allowing local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.

The 'AEDebug' registry key is installed with insecure permissions, allowing local users to modify the key to specify a Trojan Horse debugger that is automatically executed on a system crash.

In Windows NT and Windows 2000, when an administrator changes a user policy, the policy is not properly updated if the local ntconfig.pol file is not writable by the user. This could allow local users to bypass restrictions that would otherwise be enforced by the policy.

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.

thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) character in the filename.

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.

IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a dot to the end of the URL.

Vulnerabilities in DECnet/OSI for OpenVMS before version 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.

The vulnerability exists in Linux 2.2.10 and earlier and FreeBSD 3.2 when NAT is enabled. It allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, allowing local users to gain privileges by decrypting the passwords.

The snprintf function in the db library version 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.

Microsoft Exchange Server 5.5 and 5.0 does not properly handle malformed NNTP and SMTP data, which can lead to application errors.

The FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) by establishing many simultaneous passive (PASV) connections.