CVE Vulnerability Catalog

Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long USER command.

Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.

Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.

The ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length header, leading to an infinite loop and core dump when tcpdump prints the packet.

Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.

The Cisco IOS Firewall Feature set, known as Context Based Access Control (CBAC), in IOS versions 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.

Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.

CVE-2001-0927 describes a format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop version 1.0.12 and earlier, allowing remote attackers to execute arbitrary code via an argument containing format specifiers passed to the syslog_message and syslog_io_message functions.

ndcgi.exe in Netdynamics versions 4.x through 5.x, and possibly earlier, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field.

Internet Explorer 5.5 and 6.0 allows remote attackers to misrepresent the name of the file in the File Download dialogue box, potentially misleading users into thinking that the file type is safe to download.

CVE-2001-1350 describes a cross-site scripting vulnerability in namazu.cgi for Namazu version 2.0.7 and earlier. This allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter.

CVE-2001-0913 describes a format string vulnerability in Network Solutions Rwhoisd version 1.5.7.2 and earlier, allowing remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request containing format specifiers.

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.

CVE-2001-0915 describes a format string vulnerability in Berkeley parallel make (pmake) version 2.1.33 and earlier, allowing a local user to gain root privileges via format specifiers in the check argument of a shell definition.

Legato Networker before version 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address.

Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition.

CITRIX Metaframe 1.8 logs the Client Address (IP address) provided by the client instead of obtaining it from the packet headers. This allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).

Buffer overflow in the helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.

The key exchange process in the High-bandwidth Digital Content Protection (HDCP) system allows remote attackers to access data as plaintext, bypass device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.

Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.