CVE Vulnerability Catalog

The vulnerability in udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.

Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allow local users to gain privileges by entering debug mode.

Buffer overflow in Trend Micro Virus Buster 2001 version 8.02 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long 'From' header.

Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions. This can lead to denial of service or execution of arbitrary commands by modifying kernel variables in /proc/sys.

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, allowing remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.

Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.

The perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.

Akopia Interchange versions 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, allowing a remote attacker to gain administrative access via the demo stores.

The HTTP server in Compaq web-enabled management software can be used as a generic proxy server, allowing remote attackers to bypass access restrictions via the management port, 2301.

SonicWALL Tele2 and SOHO firewalls with firmware 6.0.0.0 using IPSEC with IKE pre-shared keys do not support full 128-byte IKE pre-shared keys, limiting to 48-byte keys. This allows a remote attacker to perform brute force attacks on the pre-shared keys with significantly fewer resources.

Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SMTP HELO command.

The BAT! mail client allows remote attackers to bypass user warnings of executable attachments. It is possible to execute arbitrary commands via an attachment whose file name contains many spaces, which causes the BAT! to misrepresent the attachment's type with a different icon.

Buffer overflow in the tip tool in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

Cisco VPN 3000 series concentrators before version 2.5.2(F) are vulnerable to a denial of service attack that can be executed by remote attackers flooding the SSL or telnet services with invalid login requests.

The vulnerability in Computer Associates CCC\Harvest 5.0 for Windows NT/2000 is due to the use of weak password encryption. A remote attacker can exploit this weakness to gain unauthorized privileges in the application.

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by inserting a null character or using '..'.

The vulnerability in ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.

Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.