CVE Vulnerability Catalog

Buffer overflow in the web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.

SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.

Multiple buffer overflows in how dtmail handles attachments allow a remote attacker to execute commands.

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.

CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.

The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.

The SNMP community name is guessable, which can lead to unauthorized access to network devices.

Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.

HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.

NT users can gain debug-level access on a system process using the Sechole exploit.

The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.

A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.

NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, allowing remote attackers to modify the switch's configuration.

Vulnerability in the loginout module in Digital OpenVMS 7.1 and earlier versions allows unauthorized access when external authentication is enabled.

Power management on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, allowing an attacker with physical access to input characters to the last active application for a short period after the system is restoring.

libnsl in Solaris allows an attacker to perform a denial of service on rpcbind.

HP JetAdmin version D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file.

The 'established' command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed. This can lead to administrators configuring less restrictive access controls than intended if they do not understand this functionality.