CVE Vulnerability Catalog

The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, allowing remote attackers to spoof the eTrust administrator and gain privileges.

String parsing error in rpc.kstatd in the linuxnfs or knfsd packages in SuSE and possibly other Linux systems allows remote attackers to gain root privileges.

Buffer overflow in SGI Omron WorldView Wnn allows remote attackers to execute arbitrary commands via long JS_OPEN, JS_MKDIR, or JS_FILE_INFO commands.

The password protection feature of Microsoft Money can store the password in plaintext, allowing attackers with physical access to the system to obtain the password.

O'Reilly WebSite Pro 2.3.7 installs the uploader.exe program with execute permissions for all users, allowing remote attackers to create and execute arbitrary files by directly calling uploader.exe.

Buffer overflows in the Raptor GFX configuration tool (pgxconfig) allow local users to gain elevated privileges via command line options.

Zope before 2.2.1 does not properly restrict access to the getRoles method, allowing users who can edit DTML to add or modify roles by modifying the roles list included in a request.

The Gnome Lokkit firewall package before version 0.41 does not properly restrict access to some ports, even if a user does not make any services available.

The sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded 'rsadmin' account with a null password, allowing remote attackers to execute arbitrary commands via ssh.

The net.init rc script in HP-UX 11.00 allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file.

The ping program in iputils before version 20001010, distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, increasing its exposure to bugs that would otherwise occur at lower privileges.

The userhelper program in the usermode package on Red Hat Linux executes non-setuid programs as root. This bypasses security measures in glibc and allows exploitation of format string vulnerabilities in glibc via the LANG or LC_ALL environment variables.

Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.

Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, known as the 'Cache Bypass' vulnerability.

Buffer overflow in Winamp 2.64 and earlier allows remote attackers to execute arbitrary commands via a long #EXTINF: extension in the M3U playlist.

Buffer overflow in the Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands via a URL containing a long 'keywords' parameter.

BlackBoard CourseInfo 4.0 does not properly authenticate users, allowing local users to modify CourseInfo database information and gain privileges by directly calling supporting CGI programs such as user_update_passwd.pl and user_update_admin.pl.

Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string.

Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header.