CVE Vulnerability Catalog

The loadmodule function in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, allowing local users to gain privileges.

Multiple buffer overflows in the filter command in Elm 2.4 allow attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.

Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.

SAS System 5.18 on VAX/VMS has insecure permissions for its directories and startup file, allowing local users to gain elevated privileges.

Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes, does not require authentication credentials under certain conditions, allowing remote attackers to bypass authentication requirements.

Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.

Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by using the CALL function to execute a malicious DLL, known as the Excel 'CALL Vulnerability.'

NetWare NFS mode 1 and 2 implements the 'Read Only' flag in Unix by changing the ownership of a file to root, allowing local users to gain root privileges by creating a setuid program and setting it to 'Read Only.'

Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to bypass certain access control lists when the router switches traffic from a DFS-enabled interface to an interface that does not have DFS enabled.

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain. This is known as the 'Domain Resolution' vulnerability.

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.

Unspecified vulnerability in crontab in IBM AIX 3.2 allows local users to gain root privileges via unknown attack vectors.

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

Buffer overflow in the UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.

The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the 'rm' program, which allows local users to execute arbitrary commands.

The SMS Remote Control program is installed with insecure permissions, allowing local users to gain privileges by modifying or replacing the program.

Multiple unknown vulnerabilities in the 'r-cmnds' services (remshd, rexecd, rlogind, rlogin, remsh, rcp, rexec, rdist) for HP-UX versions 10.00 through 11.00 allow attackers to gain privileges or access files.