CVE Vulnerability Catalog

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.

Tin version 1.40 creates the .tin directory with insecure permissions, allowing local users to read passwords from the .inputhistory file.

The web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocumented URLs such as ncl_items.html and ncl_subjects.html.

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a 'secure' hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

The default configuration in the Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, only restricting access to the /etc/ directory. This enables remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

Buffer overflow in thttpd HTTP server before version 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.

Buffer overflow in the POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long 'From' header in an e-mail message.

The Windows Media Player ActiveX object used in Internet Explorer 5.0 returns a specific error code when a file does not exist, allowing remote malicious websites to determine the existence of files on the client.

ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user logs off the system, which allows other users of the same system access to the unprotected NDS session.

The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, known as the 'File Access URL' vulnerability.

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.

A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, known as the 'Active Setup Control' vulnerability.

Buffer overflow in the FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long user name or password.

A vulnerability in BIND named allows a denial of service attack by consuming more than 'fdmax' file descriptors.

Buffer overflow in BIND 8.2 via NXT records may lead to unauthorized access or service disruption.

CVE-1999-0849 affects the BIND service, which can be vulnerable to a denial of service (DoS) attack via the maxdname parameter. An attacker can cause the DNS server to stop responding to queries.

CVE-1999-0851 vulnerability affects BIND service, which can be exploited for a denial of service (DoS) attack via NAPTR records.

CVE-1999-0837 vulnerability affects BIND service, which can be subject to a denial of service (DoS) attack due to improper closing of TCP sessions via so_linger.

Vulnerability in BIND causing denial of service via malformed SIG records.