Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
AFFECTED_PRODUCTS:
Sco Unixware,
Sco Unixware,
Sco Unixware
... (+1)
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
AFFECTED_PRODUCTS:
Zeus Technologies Zeus Web Server,
Zeus Technologies Zeus Web Server,
Zeus Technologies Zeus Web Server
... (+12)
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
AFFECTED_PRODUCTS:
Oracle Mysql,
Oracle Mysql,
Oracle Mysql
... (+4)
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
AFFECTED_PRODUCTS:
Sco Openserver
The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.
AFFECTED_PRODUCTS:
Novell Groupwise
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
AFFECTED_PRODUCTS:
Axis 700 Network Document Server,
Axis 700 Network Document Server,
Axis 700 Network Document Server
... (+3)
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
AFFECTED_PRODUCTS:
Isc Inn,
Isc Inn,
Isc Inn
... (+2)
The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.
AFFECTED_PRODUCTS:
Debian Debian Linux
Buffer overflow in the SHGetPathFromIDList function of the Serv-U FTP server allows attackers to cause a denial of service by performing a LIST command on a malformed .lnk file.
AFFECTED_PRODUCTS:
Microsoft Windows Nt,
Microsoft Windows 95,
Microsoft Windows 98
The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.
AFFECTED_PRODUCTS:
Daniel Beckham The Finger Server,
Daniel Beckham The Finger Server,
Daniel Beckham The Finger Server
... (+1)
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Windows Nt
Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.
AFFECTED_PRODUCTS:
Caldera Openlinux,
Suse Suse Linux
The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
AFFECTED_PRODUCTS:
Progress Webspeed
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
AFFECTED_PRODUCTS:
Wired Community Software Wwwthreads
surfCONTROL SuperScout does not properly asign a category to web sites with a . (dot) at the end, which may allow users to bypass web access restrictions.
AFFECTED_PRODUCTS:
Surfcontrol Superscout
Frontpage Server Extensions allows remote attackers to determine the physical path of a virtual directory via a GET request to the htimage.exe CGI program.
AFFECTED_PRODUCTS:
Microsoft Frontpage,
Microsoft Frontpage
Selena Sol WebBanner 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
AFFECTED_PRODUCTS:
Selena Sol Webbanner
Frontpage Server Extensions allows remote attackers to determine the name of the anonymous account via an RPC POST request to shtml.dll in the /_vti_bin/ virtual directory.
AFFECTED_PRODUCTS:
Microsoft Internet Information Server,
Microsoft Internet Information Server
The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot from a floppy disk during the installation.
AFFECTED_PRODUCTS:
Debian Debian Linux,
Debian Debian Linux,
Debian Debian Linux
Cross site scripting vulnerabilities in Apache 1.3.0 through 1.3.11 allow remote attackers to execute script as other web site visitors via (1) the printenv CGI (printenv.pl), which does not encode its output, (2) pages generated by the ap_send_error_response function such as a default 404, which do...
AFFECTED_PRODUCTS:
Apache HTTP Server,
Apache HTTP Server,
Apache HTTP Server
... (+9)
NetBSD ptrace call on VAX allows local users to gain privileges by modifying the PSL contents in the debugging process.
AFFECTED_PRODUCTS:
NetBSD Netbsd
GNU make follows symlinks when it reads a Makefile from stdin, which allows other local users to execute commands.
AFFECTED_PRODUCTS:
GNU Make
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Cartit Cartit
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Mcmurtrey Whitaker And Associates Cart32
The @Retail shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Atretail Atretail
The Check It Out shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Adgrafix Corporation Check It Out
Buffer overflows in Tiny FTPd 0.52 beta3 FTP server allows users to execute commands via the STOR, RNTO, MKD, XMKD, RMD, XRMD, APPE, SIZE, and RNFR commands.
AFFECTED_PRODUCTS:
H. Nomura Tiny Ftpdaemon
Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.
AFFECTED_PRODUCTS:
Jgaa Warftpd,
Jgaa Warftpd
The shopping cart application provided with Filemaker allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Filemaker Filemaker
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Windows Nt
The WebSiteTool shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Baron Consulting Group Websitetool
The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Intelligent Vending Systems Intellivend
Linux apcd program allows local attackers to modify arbitrary files via a symlink attack.
AFFECTED_PRODUCTS:
Debian Debian Linux
The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Easycart Easycart
Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email messages that are read by the client.
AFFECTED_PRODUCTS:
Microsoft Outlook Express
The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Web Express Shoptron
The SmartCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Netsmart Smartcart
The SalesCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Salescart Salescart
The Make-a-Store OrderPage shopping cart application allows remote users to modify sensitive purchase information via hidden form fields.
AFFECTED_PRODUCTS:
Make-A-Store Orderpage
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
AFFECTED_PRODUCTS:
Microsoft Virtual Machine,
Microsoft Virtual Machine
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
AFFECTED_PRODUCTS:
Comstock Multicsp
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (root).
AFFECTED_PRODUCTS:
Sun Cobalt Raq,
Sun Cobalt Raq 2,
Sun Cobalt Raq 3i
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.
AFFECTED_PRODUCTS:
Check Point Firewall 1
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
AFFECTED_PRODUCTS:
Avt Rightfax
Buffer overflow in portmir for AIX 4.3.0 allows local users to corrupt lock files and gain root privileges via the echo_error routine.
AFFECTED_PRODUCTS:
IBM Aix
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
AFFECTED_PRODUCTS:
Sco Unixware,
Sco Unixware,
Sco Unixware
The SyGate Remote Management program does not properly restrict access to its administration service, which allows remote attackers to cause a denial of service, or access network traffic statistics.
AFFECTED_PRODUCTS:
Sybergen Sygate,
Sybergen Sygate
Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.
AFFECTED_PRODUCTS:
Microsoft Internet Information Server,
Microsoft Internet Information Server
Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
AFFECTED_PRODUCTS:
Microsoft Index Server
The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Index Server