CVE Vulnerability Catalog

Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.

A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.

Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.

Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by the sigreturn system call or the process_write_regs kernel routine.

Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.

Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.

The #sinclude directive in Embedded Perl (ePerl) version 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive referencing a file with the code.

Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.

Buffer overflow in xinetd for Linux version 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.

Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.

Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.

Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.

Buffer overflow in xloadimage 4.1 (also known as xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.

Cisco CBOS version 2.3.8 and earlier stores passwords for (1) exec and (2) enable in cleartext in NVRAM and a configuration file. This could allow unauthorized users to obtain the passwords and gain privileges.

Buffer overflow in Computalynx CMail POP3 mail server version 2.4.9 allows remote attackers to execute arbitrary code via a long HELO command.

CVE-2001-0789 describes a format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail that allows remote attackers to cause a denial of service or potentially execute arbitrary code via a malformed mail message.

Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7, and 8 allows remote attackers to gain root access via a long username.

NetInfo Manager on Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the 'recent items' and 'services' menus, causing the applications to run with root privileges.

Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.

CVE-2001-1460 describes an SQL injection vulnerability in article.php in PostNuke versions 0.62 through 0.64 that allows remote attackers to bypass authentication via the user parameter.