CVE Vulnerability Catalog

CVE-1999-0837 vulnerability affects BIND service, which can be subject to a denial of service (DoS) attack due to improper closing of TCP sessions via so_linger.

Vulnerability in BIND causing denial of service via malformed SIG records.

Buffer overflow in BIND 8.2 via NXT records may lead to unauthorized access or service disruption.

Buffer overflow in the FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long user name or password.

Version 1.11 of Xtramail contains buffer overflow vulnerabilities that can be exploited by attackers to cause a denial of service and potentially execute arbitrary commands. The attack can be carried out through long PASS commands in the POP3 service, HELO commands in the SMTP service, or long usernames in the Control Service.

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

The whois.cgi program in the Whois Internic service allows remote attackers to execute commands via shell metacharacters in the domain entry.

Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the '8BPS' image type in a Photo Shop image header.

Vulnerability in StackGuard before version 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a non-linear attack that directly modifies a pointer to a return address.

The CC Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

A buffer overflow in InterScan VirusWall versions 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.

A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway versions 3.23/3.3 for NT, which may allow an attacker to execute arbitrary code.

Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.

Buffer overflow in sar for SCO OpenServer versions 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter.

Palm Pilot HotSync Manager version 3.0.4 on Windows 98 allows remote attackers to cause a denial of service and potentially execute arbitrary commands by sending a long string to port 14238 while the manager is in network mode.

Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request.

Buffer overflow in RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.

Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.