CVE Vulnerability Catalog

The pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication by using a NULL password.

Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.

PHP-Nuke version 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.

Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), allowing remote attackers to spoof or hijack TCP connections.

In PHP-Nuke 4.4, the files bb_smilies.php and bbcode_ref.php allow remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument.

Buffer overflow in Analog before version 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings.

CVE-2001-0180 affects the guestserver.cgi script, allowing remote attackers to execute arbitrary commands via shell metacharacters in the 'email' parameter.

NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.

Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.

Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.

Buffer overflow in qDecoder library version 5.08 and earlier, used in CGI programs like CrazyWWWBoard and CrazySearch, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

Buffer overflow in Trend Micro Virus Buster 2001 version 8.00 allows remote attackers to cause a denial of service and potentially execute arbitrary commands via a large 'To' address.

Gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.

Buffer overflows in CTRLServer in XMail allow attackers to execute arbitrary commands via the cfgfileget or domaindel functions.

CVE-2001-0193 describes a format string vulnerability in the man tool in some Linux distributions that allows local users to gain elevated privileges via a malformed -l parameter.

Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5 allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag. This issue may be due to a vulnerability in Windows Scripting Host (WSH).

Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability.

mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.