CVE Vulnerability Catalog

A network intrusion detection system (IDS) does not verify the checksum on a packet, which may lead to unauthorized access or malicious activities on the network.

Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.

A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.

A router or firewall forwards packets that claim to come from IANA reserved or private addresses, such as 10.x.x.x, 127.x.x.x, 217.x.x.x.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

mSQL version 2.0.1 and below allows remote code execution through a buffer overflow.

A remote attacker can sometimes identify the operating system of a host based on how it reacts to some IP or ICMP packets, using tools such as nmap or queso.

An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.

CVE-1999-0285 vulnerability affects the telnet service in the Windows NT Resource Kit, allowing a denial of service attack by opening and then immediately closing a connection.

On some systems, the finger .@host command may display information about certain user accounts.

A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.

The Java Web Server allowed remote users to obtain the source code for CGI programs.

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

The finger service on some systems may disclose information about certain user accounts.

The Windows NT system's registry audit policy does not log event successes or failures for non-critical registry keys.

The NetWare version of LaserFiche stores usernames and passwords unencrypted and allows administrative changes without logging.

A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.

The Gopher service is running, which may lead to unauthorized access to data.

The rexec service is running, which may lead to unauthorized access to the system.

In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.