CVE Vulnerability Catalog

Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination.

PostgreSQL authentication modules (mod_auth_pgsql 0.9.5 and mod_auth_pgsql_sys 0.9.4) allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name.

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.

The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server. This allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack.

Netegrity SiteMinder versions 3.6 through 4.5.1 allow remote attackers to bypass filtering via URLs containing Unicode characters.

The dump and dump_lfs commands in NetBSD versions 1.4.x through 1.5.1 do not properly manage privileges, which could allow local users to gain elevated privileges via the RCMD_CMD environment variable.

The firmware of the Allied Telesyn AT-AR220e router version 1.08a RC14 with the portmapper and 'Virtual Server' enabled may allow a remote attacker to access mapped services even though individual port mappings may be disabled.

SSH protocols 1 and 2, as implemented in OpenSSH and other packages, have various weaknesses that can allow a remote attacker to obtain information via sniffing. Attackers may learn about password lengths, the type of authentication used, and the lengths of shell commands.

In SCO OpenServer versions 5.0 through 5.0.6, a vulnerability allows a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.

Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.

Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.

O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ':' character.

Carello E-Commerce version 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.

The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.

A vulnerability in the AIF interface in MPE/iX 5.5 through 6.5 on HP3000 allows an attacker to gain additional privileges and access databases via the AIFCHANGELOGON program.

The deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.

Sun Chili!Soft version 3.5.2 on Linux and 3.6 on AIX creates default admin credentials in the default installation.

Sun Chili!Soft ASP has weak permissions on various configuration files, allowing a local attacker to gain additional privileges and create a denial of service.

The vulnerability in InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log.