CVE Vulnerability Catalog

Cisco VPN 3000 series concentrators before version 2.5.2(F) are vulnerable to a denial of service attack that can be executed by remote attackers flooding the SSL or telnet services with invalid login requests.

The perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.

Akopia Interchange versions 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, allowing a remote attacker to gain administrative access via the demo stores.

The HTTP server in Compaq web-enabled management software can be used as a generic proxy server, allowing remote attackers to bypass access restrictions via the management port, 2301.

The BAT! mail client allows remote attackers to bypass user warnings of executable attachments. It is possible to execute arbitrary commands via an attachment whose file name contains many spaces, which causes the BAT! to misrepresent the attachment's type with a different icon.

Buffer overflow in the tip tool in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SMTP HELO command.

Buffer overflow in the FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.

Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions. This can lead to denial of service or execution of arbitrary commands by modifying kernel variables in /proc/sys.

Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, allowing remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.

Buffer overflow in Trend Micro Virus Buster 2001 version 8.02 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long 'From' header.

Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allow local users to gain privileges by entering debug mode.

Heap overflow in the FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

Buffer overflows in BSD-based FTP servers allow remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence. This affects the functions g_opendir, g_lstat, g_stat, and the glob0 buffer used in glob functions glob2 and glob3.

Gene6 G6 FTP Server version 2.0 (also known as BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the SIZE and MDTM commands when the 'show relative paths' option is not enabled.

The vulnerability in Computer Associates CCC\Harvest 5.0 for Windows NT/2000 is due to the use of weak password encryption. A remote attacker can exploit this weakness to gain unauthorized privileges in the application.

The web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request containing "%2e" (dot dot) characters.

The vulnerability in udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.