CVE Vulnerability Catalog

A legacy credential caching mechanism in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.

Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after it has been scheduled.

Buffer overflow in the SCO su program allows local users to gain root access via a long username.

Buffer overflow in the 'su' command in Linux allows local users to gain root access.

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent.

Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.

Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation.

The internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addresses as specified in its configuration, allowing arbitrary remote attackers to access the server.

Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via several long CWD commands.

Buffer overflow in Solaris kcms_configure due to a long NETPATH environmental variable.

Windows NT improperly downloads a system policy if the domain user logs into the domain with a space at the end of the domain name.

Pine before version 4.21 does not properly filter shell metacharacters from URLs, allowing remote attackers to execute arbitrary commands via a malformed URL.

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

The web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.

Buffer overflow in thttpd HTTP server before version 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.

Buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long 'From' header in an e-mail message.

The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, known as the 'File Access URL' vulnerability.

Vulnerability in BIND causing denial of service via malformed SIG records.

CVE-1999-0837 vulnerability affects BIND service, which can be subject to a denial of service (DoS) attack due to improper closing of TCP sessions via so_linger.