CVE Vulnerability Catalog

Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SMTP HELO command.

Cisco VPN 3000 series concentrators before version 2.5.2(F) are vulnerable to a denial of service attack that can be executed by remote attackers flooding the SSL or telnet services with invalid login requests.

Buffer overflow in the tip tool in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

Gene6 G6 FTP Server version 2.0 (also known as BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the SIZE and MDTM commands when the 'show relative paths' option is not enabled.

Akopia Interchange versions 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, allowing a remote attacker to gain administrative access via the demo stores.

SonicWALL Tele2 and SOHO firewalls with firmware 6.0.0.0 using IPSEC with IKE pre-shared keys do not support full 128-byte IKE pre-shared keys, limiting to 48-byte keys. This allows a remote attacker to perform brute force attacks on the pre-shared keys with significantly fewer resources.

The vulnerability in Computer Associates CCC\Harvest 5.0 for Windows NT/2000 is due to the use of weak password encryption. A remote attacker can exploit this weakness to gain unauthorized privileges in the application.

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, allowing remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.

Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allow local users to gain privileges by entering debug mode.

Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.

Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions. This can lead to denial of service or execution of arbitrary commands by modifying kernel variables in /proc/sys.

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.

Buffer overflow in Trend Micro Virus Buster 2001 version 8.02 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long 'From' header.

The web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request containing "%2e" (dot dot) characters.

The vulnerability in udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.

Buffer overflow in ntpd ntp daemon (version 4.0.99k and earlier) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by inserting a null character or using '..'.

The vulnerability in ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.

Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.