CVE Vulnerability Catalog

Various modems that do not implement a guard time or are configured with a guard time of 0 can allow remote attackers to execute arbitrary modem commands via a '+++' sequence in ICMP packets, the subject of an e-mail message, IRC commands, and others.

The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.

Buffer overflow in Sun's ping program can give local users root access.

SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.

Buffer overflow in the web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute arbitrary commands via a long URL.

SSH version 1.2.25 on HP-UX allows access to new user accounts.

Multiple buffer overflows in how dtmail handles attachments allow a remote attacker to execute commands.

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.

CVE-1999-1417 describes a format string vulnerability in the AnswerBook2 (AB2) web server dwhttpd 3.1a4 that allows remote attackers to cause a denial of service and potentially execute arbitrary commands via encoded % characters in an HTTP request, which is improperly logged.

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.

The Hylafax faxsurvey CGI script on Linux allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage.

HP OpenView Omniback allows remote execution of commands as root via spoofing, and local users can gain root access via a symlink attack.

NT users can gain debug-level access on a system process using the Sechole exploit.

Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.

The SNMP community name is guessable, which can lead to unauthorized access to network devices.

The Mutt mail client allows a remote attacker to execute commands via shell metacharacters.

A vulnerability has been identified that allows arbitrary command execution via a buffer overflow in the IMAP authenticate command.

NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, allowing remote attackers to modify the switch's configuration.

Power management on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, allowing an attacker with physical access to input characters to the last active application for a short period after the system is restoring.