CVE Vulnerability Catalog

Vulnerability in autodns.pl for AutoDNS before version 0.0.4 related to domain names that are not fully qualified.

Expect before version 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library accessed by mkpasswd.

Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.

The checkAccess function in PHPSlice version 0.1.4 and all versions between 0.1.1 and 0.1.6 does not properly verify the administrative access level, which could allow remote attackers to gain privileges.

Vulnerability in the nPULSE server before version 0.53p4.

Vulnerability in phpWebSite before version 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.

Squid versions before 2.3STABLE5 in HTTP accelerator mode do not enable access control lists (ACLs) when using the httpd_accel_host and http_accel_with_proxy off settings, allowing attackers to bypass ACLs and conduct unauthorized activities such as port scanning.

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.

Docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.

Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.

CVE-2001-0974 describes format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 that allow remote attackers to execute arbitrary code.

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, allowing remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with '#!' and the desired program name.

Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error.

Buffer overflows in Teamware Office Enterprise Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named winlogon.exe, csrss.exe, smss.exe, and services.exe. This could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

iPlanet Directory Server 4.1.4 and earlier is vulnerable to a denial of service attack that can cause system crashes. Attackers can exploit invalid BER length fields, which may also allow arbitrary code execution.

A critical vulnerability in the InJoin or LiveContent Directory Server allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via malformed BER encodings.

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

Buffer overflows in the InJoin Directory Server or LiveContent Directory may allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.