CVE Vulnerability Catalog

Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.

OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.

Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.

Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to execute arbitrary commands.

The lpstat program in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.

A vulnerability in GNATS GnatsWeb versions 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.

lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.

Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument.

Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.

The pmpost program in Performance Co-Pilot (PCP) before version 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory.

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, allowing remote attackers to bypass the ACL.

The viralator CGI script in version 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via SNMP and DMI.

Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.

A buffer overflow in the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending a large amount of data.

CVE-2001-0948 is a cross-site scripting (XSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.

Buffer overflows in the forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) allow remote attackers to execute arbitrary code via long arguments to various parameters. This issue affects versions 3.3 through 4.2.1.

The Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.

The ValiCert Enterprise Validation Authority (EVA) Administration Server versions 3.3 through 4.2.1 uses insufficiently random data to generate session tokens and certificates, which may facilitate brute force attacks.