CVE Vulnerability Catalog

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code.

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks.

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code.

Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via a long Transport field in a SETUP RTSP request, a DESCRIBE RTSP request with a long URL argument, or two simultaneous HTTP GET requests with long arguments.

Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, allowing remote attackers to read arbitrary files.

An unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code. This is a new variant of the certificate validation flaw that could enable identity spoofing.

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contain a back door telnet server intended for development that was not removed before distribution, allowing remote attackers to gain administrative privileges.

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model, enabling access to information on the local system or in other domains and possibly executing code via cached methods and objects.

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, a long filename in a rtsp:// request, or certain 'Now Playing' options on a downloaded file with a long filename.

Buffer overflow in the Dispatch() routine for the XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

Buffer overflow in samba versions 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption.

TightVNC before 1.2.6 generates the same challenge string for multiple connections, allowing remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions.

CVE-2002-1308 involves a heap-based buffer overflow in Netscape and Mozilla browsers that allows remote attackers to execute arbitrary code. This issue occurs when a malicious .jar file is decompressed via a jar: URL.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion.

Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records.

A heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long .jsp file name.