CVE Vulnerability Catalog

Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

CVE-2001-1308 describes format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier that can be exploited by remote attackers. They may cause a denial of service (crash) and potentially execute arbitrary code.

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named winlogon.exe, csrss.exe, smss.exe, and services.exe. This could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

Lotus Domino R5 versions before R5.0.7a are vulnerable to buffer overflows that can be exploited by remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.

IBM SecureWay 3.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding.

Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.

The static kernel symbol table in the dynamically loadable kernel module (dlkm) in HP-UX 11.11 is not properly configured, allowing local users to gain privileges.

Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings, potentially leading to buffer overflows.

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.

CVE-2001-1176 describes a format string vulnerability in Check Point VPN-1/FireWall-1 4.1 that allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.

The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.

An unknown vulnerability in ColdFusion Server from version 2.0 to 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.

FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, allowing local users to gain privileges.

Check Point VPN-1/FireWall-1 version 4.1 contains a default macro, accept_fw1_rdp, which may allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.

Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs, which can lead to modifications in various forms, such as using a double slash (//) instead of a single slash, URL-encoded characters, requesting the IP address instead of the domain name, or using a leading 0 in an octet of an IP address.

CVE-2001-1081 describes format string vulnerabilities in Livingston/Lucent RADIUS before version 2.1.va.1 that may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers injected into log messages.

Buffer overflow in the whodo tool in Solaris SunOS versions 5.5.1 through 5.8 allows local users to execute arbitrary code via a long SOR or CFIME environment variable.

The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, allowing remote attackers to connect to arbitrary ports on remote systems behind the device.

XDM in XFree86 versions 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option. This allows remote attackers to gain unauthorized access to the X display via a brute force attack.