CVE Vulnerability Catalog

Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name.

KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.

CVE-2001-0032 describes a format string vulnerability in ssldump that may allow remote attackers to cause a denial of service and potentially gain root privileges via malicious format string specifiers in a URL.

Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.

MailMan Webmail version 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.

FoolProof 3.9 allows local users to bypass program execution restrictions by downloading restricted executables from another source and renaming them.

The common.inc.php file in phpWebLog 0.4.2 improperly initializes the $CONF array, inadvertently setting the password to a single character. This allows remote attackers to easily guess the SiteKey and gain administrative privileges to phpWebLog.

phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the phpgw.inc.php program.

Multiple buffer overflows in Lexmark MarkVision printer driver programs allow local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.

IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, allowing remote attackers to gain access to the database.

The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, allowing remote attackers to guess passwords without detection.

The default permissions for the RAS Administration key in Windows NT 4.0 allow local users to execute arbitrary commands by changing the value to point to a malicious DLL.

CVE-2001-0013 describes a format string vulnerability in the nslookupComplain function in BIND 4 that allows remote attackers to gain root privileges.

The mod_sqlpw module in ProFTPD does not reset a cached password when a user changes accounts using the 'user' command, allowing authenticated attackers to gain privileges of other users.

Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long MAIL FROM command.

The bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

The 'Configure Your Server' tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, allowing attackers with physical access to the controller to install malicious programs.

The itetris/xitetris program version 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program. This allows local users to gain root privileges by changing their PATH to point to a malicious gunzip program.