CVE Vulnerability Catalog

Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.

Multiple SNMPv1 implementations have vulnerabilities in request handling that can be exploited by remote attackers to cause denial of service or gain privileges via GetRequest, GetNextRequest, and SetRequest messages.

Many SNMP implementations have vulnerabilities that can be exploited by remote attackers to cause denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.

The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control, potentially leading to license theft.

The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.

Buffer overflow in AOL Instant Messenger (AIM) versions 4.7.2480, 4.8.2616, and others allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).

CVE-2001-0891 describes a format string vulnerability in the NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX. This allows a local user to gain root privileges by submitting a batch job with a name that contains formatting characters.

A format string vulnerability exists in stunnel before version 3.22 when used in client mode for smtp, pop, or nntp, allowing remote malicious servers to execute arbitrary code.

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges through various parameters in scripts.

In Bugzilla versions before 2.14.1, the CGI.pl script allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, resulting in a null password being sent to the LDAP server.

Bugzilla before version 2.14.1 allows remote attackers to spoof user comments and post bugs as another user by manipulating parameters in HTTP requests.

OpenLDAP versions from 2.0 to 2.0.19 allow local and anonymous users (before 2.0.8) to perform a 'replace' action on access controls without values, leading to the deletion of non-mandatory attributes that should be protected by ACLs.

Versions of sudo from 1.6.0 to 1.6.3p7 do not properly clear environment variables before calling the mail program, which could allow local users to gain root privileges by modifying these variables.

Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.

A vulnerability in the files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.

UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify the permissions of files writable by the user via a symlink attack.

The vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to invoke executables present on the local system through HTML objects with the codebase property. This is known as the 'Local Executable Invocation via Object tag' vulnerability.

Buffer overflow in passwd for HP UX B.10.20 allows local users to execute arbitrary commands with root privileges via a long LANG environment variable.

Buffer overflow in grpck and pwck, if installed setuid on a system, may allow local users to gain privileges via a long command line argument.

CVE-2001-1208 describes a format string vulnerability in DayDream BBS that allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.