CVE Vulnerability Catalog

Linux version 2.0.37 does not properly encode the Custom segment limit, allowing local users to gain root privileges by accessing and modifying kernel memory.

A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.

CVE-1999-0918 vulnerability affects various Windows systems that are susceptible to denial of service (DoS) attacks via malformed, fragmented IGMP packets.

The HP CDE program includes the current directory in the root user's PATH variable.

Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd) may lead to unauthorized access or system crashes.

Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.

The default FTP configuration in HP Visualize Conference allows conference users to send a file to other participants without authorization.

An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.

The MBone SDR Package allows remote attackers to execute commands via shell metacharacters in Session Initiation Protocol (SIP) messages.

Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine.

VMWare 1.0.1 for Linux has a buffer overflow due to a long HOME environmental variable.

Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.

Buffer overflows in the Red Hat net-tools package may lead to unauthorized access or system crashes.

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input.

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, allowing local users to replace a privileged executable (processd) with a Trojan horse.

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.

The dtlogin program in Compaq Tru64 UNIX allows local users to gain root privileges.

Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the 'established' keyword in an access list.