CVE Vulnerability Catalog

The PIM software for Royal daVinci does not properly password-protect access to data stored in the .mdb (Microsoft Access) file, allowing local users to read the data without a password by directly accessing the files with another application, such as Access.

The ident/identd service is running, which may lead to the disclosure of user information.

The rpc.rquotad service is running, which may lead to unauthorized access to quota system information.

The echo service is running, which may lead to information disclosure.

The rpc.sprayd service is running, which may lead to unauthorized access to the system.

The rstat/rstatd service is running, which may lead to unauthorized access to system information.

The systat service is running, which may lead to the disclosure of system information.

The daytime service is running, which may lead to unauthorized access to time-related information.

The chargen service is running, which may lead to unauthorized use of system resources.

WinGate is being used, which may lead to potential security threats.

Linux versions 2.1.132 and earlier allow local users to cause a denial of service (resource exhaustion) by reading a large buffer from a random device (e.g. /dev/urandom), which cannot be interrupted until the read has completed.

Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, allowing local users to modify Word Perfect behavior by editing files in the working directory or to modify other users' files via a symlink attack.

Internet Explorer versions 3.x to 4.01 allows a remote attacker to insert malicious content into a frame of another web site, known as frame spoofing.

KDE kppp allows local users to create a directory in an arbitrary location via the HOME environmental variable.

Internet Explorer 4.01 allows remote attackers to read arbitrary files by pasting a file name into the file upload control, known as untrusted scripted paste.

Internet Explorer 4.0 and 4.01 allow a remote attacker to read files via IE's cross frame security, aka the 'Cross Frame Navigate' vulnerability.

Attackers can crash a Cisco IOS router or device, provided they can get to an interactive prompt (such as a login). This applies to some IOS 9.x, 10.x, and 11.x releases.

The dumpreg program in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, allowing local users to cause a denial of service (crash) by redirecting fd 1 (stdout) to the kernel.

cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password prompts) via the L2/AGAIN key.

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail.