CVE Vulnerability Catalog

Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.

csNewsPro.cgi in CGIScript.net csNews Professional allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.

X-News (x_news) version 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g., via sniffing or the users.txt data file, and providing it in a cookie.

Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.

DCTC client version 0.83.3 allows remote attackers to cause a denial of service (crash) by sending a string ending with a NULL byte character.

acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, allowing remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.

The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, allowing remote attackers to gain access.

ICQ client versions 2001b, 2002a, and 2002b allow remote attackers to cause a denial of service by sending a message with a large number of emoticons.

Sun PC NetLink versions 1.0 through 1.2 improperly set access control lists (ACL) for files and directories using symbolic links that have been restored from backup. This could allow local or remote attackers to bypass intended access restrictions.

Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.

MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.

Symantec Norton Personal Firewall 2002 allows remote attackers to bypass portscan protection by using various combinations of TCP flags, such as SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, and SYN/FIN/URG/PUSH.

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.

Buffer overflow in Advanced TFTP (atftp) versions 0.5 and 0.6, if installed with setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.

Linksys WET11 firmware versions 1.31 and 1.32 allow remote attackers to cause a denial of service (crash) by sending a packet with the device's hardware address as the source MAC address in the DLC header.

Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username.

MySimpleNews has a static code injection vulnerability that allows remote attackers to inject arbitrary PHP code and HTML via the LOGIN, DATA, and MESS parameters.

A format string vulnerability in the newsx NNTP client before version 1.4.8 allows local users to execute arbitrary code via improperly handled format string specifiers in a call to the syslog function.

Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing one additional character after .html, .htm, .asp, or .inc, such as .aspx files.