CVE Vulnerability Catalog

Expect before version 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library accessed by mkpasswd.

Vulnerability in phpWebSite before version 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.

Squid versions before 2.3STABLE5 in HTTP accelerator mode do not enable access control lists (ACLs) when using the httpd_accel_host and http_accel_with_proxy off settings, allowing attackers to bypass ACLs and conduct unauthorized activities such as port scanning.

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.

Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error.

Docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, allowing remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with '#!' and the desired program name.

CVE-2001-0974 describes format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 that allow remote attackers to execute arbitrary code.

Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named winlogon.exe, csrss.exe, smss.exe, and services.exe. This could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

CVE-2001-0975 describes a buffer overflow vulnerability in Oracle Internet Directory Server (LDAP) versions 2.1.1.x and 3.0.1, allowing remote attackers to execute arbitrary code.

Oracle Internet Directory Server versions 2.1.1.x and 3.0.1 are vulnerable to remote attacks that can lead to denial of service and potentially execute arbitrary code. This attack exploits invalid encodings of BER OBJECT-IDENTIFIER values.

Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Lotus Domino R5 before version R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.

Buffer overflows in the InJoin Directory Server or LiveContent Directory may allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.

CVE-2001-1308 describes format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier that can be exploited by remote attackers. They may cause a denial of service (crash) and potentially execute arbitrary code.

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Buffer overflows in Teamware Office Enterprise Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

A critical vulnerability in the InJoin or LiveContent Directory Server allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed BER encodings.