Launchpad CVE tracker

Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

Created on 2005-09-20 and modified on 2005-09-20.

Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system accounting configuration.

Created on 2005-09-20 and modified on 2005-09-20.

Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.

Created on 2005-09-20 and modified on 2005-09-20.

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.

Created on 2005-09-20 and modified on 2005-09-20.

O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an argument to (1) args.cmd or (2) args.bat.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute arbitrary commands.

Created on 2005-09-20 and modified on 2005-09-20.

ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disk with a known password, waiting for the ZIP drive to power down, manually replacing the known disk with the target disk, and using the known password to access the target disk.

Created on 2005-09-20 and modified on 2005-09-20.

By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of other users when the calendar is being shared.

Created on 2005-09-20 and modified on 2005-09-20.

nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.

Created on 2005-09-20 and modified on 2005-09-20.

install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file.

Created on 2005-09-20 and modified on 2005-09-20.

Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying kernel memory.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066.

Created on 2005-09-20 and modified on 2005-09-20.

Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, which is automatically downloaded and executed without prompting the user.

Created on 2005-09-20 and modified on 2005-09-20.

HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.

Created on 2005-09-20 and modified on 2005-09-20.

Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not exist, which allows remote malicious web sites to determine the existence of files on the client.

Created on 2005-09-20 and modified on 2005-09-20.

Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the passwords and gain privileges.

Created on 2005-09-20 and modified on 2005-09-20.

Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter.

Created on 2005-09-20 and modified on 2005-09-20.

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

Created on 2005-09-20 and modified on 2005-09-20.

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

Created on 2005-09-20 and modified on 2005-09-20.

Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensitive information, to local users such as user IDs, passwords and SNMP community strings.

Created on 2005-09-20 and modified on 2005-09-20.

Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise.

Created on 2005-09-20 and modified on 2005-09-20.

SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.

Created on 2005-09-20 and modified on 2005-09-20.

Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.

Created on 2005-09-20 and modified on 2005-09-20.

ROUTERmate has a default SNMP community name which allows remote attackers to modify its configuration.

Created on 2005-09-20 and modified on 2005-09-20.

Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.

Created on 2005-09-20 and modified on 2005-09-20.

Buffer overflow in ALMail32 POP3 client via From: or To: headers.

Created on 2005-09-20 and modified on 2005-09-20.

ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack.

Created on 2005-09-20 and modified on 2005-09-20.

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of CVE-1999-0022. Notes: All CVE users should reference CVE-1999-0022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Created on 2005-09-20 and modified on 2005-09-20.

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0315. Reason: This candidate's original description had a typo that delayed it from being detected as a duplicate of CVE-1999-0315. Notes: All CVE users should reference CVE-1999-0315 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Created on 2005-09-20 and modified on 2005-09-20.

IRIX and AIX automountd services (autofsd) allow remote users to execute root commands.

Created on 2005-09-20 and modified on 2005-09-20.

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0032. Reason: This candidate is a duplicate of CVE-1999-0032. Notes: All CVE users should reference CVE-1999-0032 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Created on 2005-09-20 and modified on 2005-09-20.

Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.

Created on 2005-09-20 and modified on 2005-09-20.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

Created on 2005-09-20 and modified on 2005-09-20.