CVE Vulnerability Catalog

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by the sigreturn system call or the process_write_regs kernel routine.

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.

Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.

Buffer overflow in Computalynx CMail POP3 mail server version 2.4.9 allows remote attackers to execute arbitrary code via a long HELO command.

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI using methods such as GETPROPERTIES or GETATTRIBUTENAMES.

Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.

Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.

Cisco CBOS version 2.3.8 and earlier stores passwords for (1) exec and (2) enable in cleartext in NVRAM and a configuration file. This could allow unauthorized users to obtain the passwords and gain privileges.

Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.

Buffer overflow in xinetd for Linux version 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.

OpenSSH before 2.9.9 may not properly handle the 'from' option associated with a key in the ~/.ssh/authorized_keys2 file, which could allow remote attackers to login from unauthorized IP addresses.

Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7, and 8 allows remote attackers to gain root access via a long username.

CVE-2001-0789 describes a format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail that allows remote attackers to cause a denial of service or potentially execute arbitrary code via a malformed mail message.

Buffer overflow in xloadimage 4.1 (also known as xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.

Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via 'CWD ...' command.

Perception LiteServe version 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as upper case letters or 8.3 file names.

KDE ktvision version 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file.

The Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, allowing remote attackers to gain access via telnet.