CVE Vulnerability Catalog

The #exec function is enabled for Server Side Include (SSI) files in IIS, which may lead to unauthorized command execution on the server.

An attacker can force a printer to print arbitrary documents if it does not require a password, or to become disabled.

The HKEY_LOCAL_MACHINE key in a Windows NT system has inappropriate, system-critical permissions.

The Logon box of a Windows NT system displays the name of the last user who logged in.

Two or more Unix accounts have the same user identifier (UID), which can lead to authorization and resource access issues.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy.

A trust relationship exists between two Unix hosts, which may lead to unauthorized access to resources.

An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv.

An SSH server allows authentication through the .rhosts file, which may lead to unauthorized access.

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writable by world, a real password file is obtainable, or executable commands such as 'ls' can be overwritten.

A Windows NT log file has an inappropriate maximum size or retention period.

A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.

A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.

A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets, which may lead to unauthorized access or bypassing of security measures.

In Windows NT, an inappropriate user is a member of a group, such as Administrators, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc.

The rexec service is running, which may lead to unauthorized access to the system.

The Gopher service is running, which may lead to unauthorized access to data.

A system-critical program, library, or file has a checksum or other integrity measurement that indicates that it has been modified.

The system is running a version of software that has been replaced with a Trojan Horse at one of its distribution points. This affects TCP Wrappers 7.6, util-linux 2.9g, wuarchive ftpd (wuftpd) 2.2 and 2.1f, IRC client (ircII) ircII 2.2.9, OpenSSH 3.4p1, and Sendmail 8.12.6.