CVE Vulnerability Catalog

Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbitrary commands, via a long response string.

IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (forward slash) characters.

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.

An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders when the users share the same Local APPC LU.

Vulnerabilities in DECnet/OSI for OpenVMS before version 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain privileges or cause a denial of service.

The snprintf function in the db library version 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that would be prevented by a properly implemented snprintf.

Vulnerability in the bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.

The genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, resulting in transactions being sent in cleartext.

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML (DHTML) to send the data to the attacker.

The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.

A vulnerability in Internet Explorer 3.02 and 4.0 that causes automatic resending of authentication information to the second site during a redirect.

The sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.

Squid version 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/password pair.

IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, known as the IIS 'GET' vulnerability.

The vulnerability exists in Linux 2.2.10 and earlier and FreeBSD 3.2 when NAT is enabled. It allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.

A vulnerability in Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.

The snmpd server in the cmu-snmp package before version 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive information.

Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.

The vulnerability in DNS allows remote attackers to use DNS name servers as traffic amplifiers. An attacker can send a UDP DNS query with a spoofed source address, resulting in more traffic to the victim than was sent by the attacker.

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, allowing local users to gain privileges by decrypting the passwords.