Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
AFFECTED_PRODUCTS:
Microsoft Internet Explorer,
Microsoft Internet Explorer
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.
AFFECTED_PRODUCTS:
Bsdi Bsd Os,
Bsdi Bsd Os,
Caldera Openlinux
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
AFFECTED_PRODUCTS:
Bsdi Bsd Os,
Bsdi Bsd Os,
Caldera Openlinux
TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.
AFFECTED_PRODUCTS:
Teamshare Teamtrack
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local users to gain privileges by extracting the passwords from msgboxes.dbf.
AFFECTED_PRODUCTS:
True North Internet Anywhere Mail Server,
True North Internet Anywhere Mail Server
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2) TOP, or (3) UIDL commands using letters as arguments.
AFFECTED_PRODUCTS:
True North Internet Anywhere Mail Server
Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.
AFFECTED_PRODUCTS:
True North Internet Anywhere Mail Server,
True North Internet Anywhere Mail Server
Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.
AFFECTED_PRODUCTS:
Yahoo Pager
Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands.
AFFECTED_PRODUCTS:
Mediahouse Software Statistics Server,
Mediahouse Software Statistics Server
Mediahouse Statistics Server allows remote attackers to read the administrator password, which is stored in cleartext in the ss.cfg file.
AFFECTED_PRODUCTS:
Mediahouse Software Statistics Server,
Mediahouse Software Statistics Server
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.
AFFECTED_PRODUCTS:
Hughes Technologies W3 Auth
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.
AFFECTED_PRODUCTS:
IBM Aix
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local users to gain privileges by replacing a program with a Trojan horse.
AFFECTED_PRODUCTS:
Arcad Systemhaus Arcad
Buffer overflow in AIX ftpd in the libc library.
AFFECTED_PRODUCTS:
IBM Aix,
IBM Aix,
IBM Aix
mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
AFFECTED_PRODUCTS:
Linux Linux Kernel
Buffer overflow in mutt mail client allows remote attackers to execute commands via malformed MIME messages.
AFFECTED_PRODUCTS:
Mutt Mutt Mail Client
Buffer overflow in Adobe Acrobat ActiveX control (pdf.ocx, PDF.PdfCtrl.1) 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method.
AFFECTED_PRODUCTS:
Adobe Acrobat Reader
Arkiea nlservd allows remote attackers to conduct a denial of service.
AFFECTED_PRODUCTS:
Knox Software Arkeia,
Knox Software Arkeia
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC GET request.
AFFECTED_PRODUCTS:
Kvirc Irc Client
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary commands via the methods (1) vAddNewsServer or (2) bIsNewsServerConfigured.
AFFECTED_PRODUCTS:
Microsoft Msn Setup Bulletin Board Services
Buffer overflow in Registration Wizard ActiveX control (regwizc.dll, InvokeRegWizard) 3.0.0.0 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands.
AFFECTED_PRODUCTS:
Microsoft Internet Explorer,
Microsoft Internet Explorer
IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.
AFFECTED_PRODUCTS:
Microsoft Internet Information Server,
Microsoft Commercial Internet System
Buffer overflow in sccw allows local users to gain root access via the HOME environmental variable.
AFFECTED_PRODUCTS:
Suse Suse Linux
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Solaris
... (+2)
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via the -f parameter and a malformed zone file.
AFFECTED_PRODUCTS:
IBM Aix,
IBM Aix
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.
AFFECTED_PRODUCTS:
Mandrakesoft Mandrake Linux,
Gnome Gnome Libs
Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.
AFFECTED_PRODUCTS:
Knox Software Arkeia
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+4)
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.
AFFECTED_PRODUCTS:
Infodrom Cfingerd
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Windows Nt,
Microsoft Windows 95,
Microsoft Windows 95
... (+2)
The SSH authentication agent follows symlinks via a UNIX domain socket.
AFFECTED_PRODUCTS:
SSH Ssh
The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.
AFFECTED_PRODUCTS:
Microsoft Windows Nt
Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+7)
iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.
AFFECTED_PRODUCTS:
Ihtml Merchant Ihtml Merchant
sccw allows local users to read arbitrary files.
AFFECTED_PRODUCTS:
Steven J. Merrifield Soundcard Cw
WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.
AFFECTED_PRODUCTS:
Matt Wright Wwwboard
WWWBoard has a default username and default password.
AFFECTED_PRODUCTS:
Matt Wright Wwwboard
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
AFFECTED_PRODUCTS:
University Of Kansas Lynx
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+29)
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+11)
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Sunos,
Sun Sunos
... (+25)
Hotmail allows Javascript to be executed via the HTML STYLE tag, allowing remote attackers to execute commands on the user's Hotmail account.
AFFECTED_PRODUCTS:
Microsoft Hotmail
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
AFFECTED_PRODUCTS:
Netscape Enterprise Server,
Netscape Enterprise Server
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
AFFECTED_PRODUCTS:
Fuseware Fusemail
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Solaris
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".
AFFECTED_PRODUCTS:
Apache HTTP Server,
Matt Wright Matt Wright Guestbook
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server.
AFFECTED_PRODUCTS:
Computalynx Cmail,
Computalynx Cmail
Internet Explorer 5.0 and 5.01 allows remote attackers to modify or execute files via the Import/Export Favorites feature, aka the "ImportExportFavorites" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Internet Explorer,
Microsoft Internet Explorer
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
AFFECTED_PRODUCTS:
Microsoft Site Server,
Microsoft Commercial Internet System,
Microsoft Commercial Internet System
... (+1)