CVE Vulnerability Catalog

Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.

Buffer overflow in Sun ONE / iPlanet Web Server versions 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.

Bugzilla versions 2.14 before 2.14.2 and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.

Buffer overflow in OpenSSL 0.9.7 before version 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.

Buffer overflows in OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via a large client master key in SSL2 or a large session ID in SSL3.

Buffer overflow in DNS resolver functions that perform lookup of network names and addresses occurs in BIND 4.9.8 and glibc 2.2.5 and earlier. This allows remote malicious DNS servers to execute arbitrary code.

OpenSSL versions 0.9.6d and earlier, and 0.9.7-beta2 and earlier, do not properly handle ASCII representations of integers on 64-bit platforms. This could allow attackers to cause a denial of service and possibly execute arbitrary code.

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.

The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.

Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434.

The vulnerability in simpleinit on Linux systems is that it does not close a FIFO file descriptor before creating a child process. This allows the child process to execute arbitrary programs with root privileges.

OpenBSD versions 2.9 through 3.1 allow local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.

In OpenSSH 3.2.2, when using YP with netgroups, there is a possibility that users may successfully authenticate and log in with another user's password under certain conditions.

Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to plugin.php, admin.php, or del.php that modifies the PHORUM[settings_dir] variable to point to a directory containing a PHP file with the commands.

Buffer overflow in lsmcode in AIX 4.3.3 may lead to unauthorized access or execution of malicious code.

Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.

Vulnerability in the administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.

Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.

Buffer overflow in pioout on AIX 4.3.3 may lead to unauthorized access or execution of malicious code.