CVE Vulnerability Catalog

The pluggable authentication module for MySQL (pam_mysql) before version 0.4.7 does not properly cleanse user input when constructing SQL statements, allowing attackers to obtain plaintext passwords or hashes.

Buffer overflow in the IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.

CVE-2000-0969 describes a format string vulnerability in Half Life dedicated server build 3104 and earlier, allowing remote attackers to execute arbitrary commands by injecting format strings into the changelevel command via the system console or rcon.

The bbd server in Big Brother System and Network Monitor before version 1.5c2 allows remote attackers to execute arbitrary commands via the '&' shell metacharacter.

Internet Explorer versions prior to 5.5 forwards cached user credentials for a secure web site to insecure pages on the same site. This could allow remote attackers to obtain the credentials by monitoring connections to the web server.

Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL.

A vulnerability in the pw_error function in the BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.

CVE-2000-0995 describes a vulnerability in the yp_passwd program in OpenBSD that allows attackers to gain root privileges by providing a malformed name.

CVE-2000-0997 describes format string vulnerabilities in the eeprom program in OpenBSD, NetBSD, and possibly other operating systems, allowing local attackers to gain root privileges.

GNU Groff uses the current working directory to find a device description file, allowing a local user to gain additional privileges by including a malicious postpro directive in the description file, which is executed when another user runs groff.

A buffer overflow vulnerability was found in the ncurses library that allows a local user to execute arbitrary commands via long environmental variables such as TERM or TERMINFO_DIRS.

Buffer overflow in the HTTP protocol parser for Microsoft Network Monitor (Netmon) allows remote attackers to execute arbitrary commands via malformed data.

Zope versions 2.2.0 through 2.2.4 improperly perform security registration for legacy names of object constructors, which could allow attackers to perform unauthorized activities.

Buffer overflow in the cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code.

Heap overflow in Worldclient in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.

Buffer overflows in TYPSoft FTP Server 0.78 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.

Check Point Firewall-1 versions 3.0 through 4.1 generate different error messages for invalid usernames and passwords, allowing remote attackers to determine valid usernames and guess passwords via brute force attacks.

A format string vulnerability in the logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service.

The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, allowing remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.