Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.
AFFECTED_PRODUCTS:
Camshot Webcam Http Server
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
AFFECTED_PRODUCTS:
Sco Unixware
ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets.
AFFECTED_PRODUCTS:
FreeBSD Freebsd,
FreeBSD Freebsd,
FreeBSD Freebsd
... (+20)
The SMS Remote Control program is installed with insecure permissions, which allows local users to gain privileges by modifying or replacing the program.
AFFECTED_PRODUCTS:
Microsoft Systems Management Server
Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.
AFFECTED_PRODUCTS:
Csm Mail Server,
Csm Mail Server,
Csm Mail Server
... (+5)
AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.
AFFECTED_PRODUCTS:
Altavista Search Intranet,
Altavista Search Intranet
The bna_pass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands.
AFFECTED_PRODUCTS:
Nortel Optivity Net Architect
Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service.
AFFECTED_PRODUCTS:
Trend Micro Pc Cillin
Macintosh systems generate large ICMP datagrams in response to malformed datagrams, allowing them to be used as amplifiers in a flood attack.
AFFECTED_PRODUCTS:
Apple macOS
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
AFFECTED_PRODUCTS:
Great Circle Associates Majordomo,
Great Circle Associates Majordomo
resend command in Majordomo allows local users to gain privileges via shell metacharacters.
AFFECTED_PRODUCTS:
Great Circle Associates Majordomo
Denial of service in Savant web server via a null character in the requested URL.
AFFECTED_PRODUCTS:
Michael Lamont Savant Webserver
Multiple unknown vulnerabilities in the "r-cmnds" (1) remshd, (2) rexecd, (3) rlogind, (4) rlogin, (5) remsh, (6) rcp, (7) rexec, and (8) rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files.
AFFECTED_PRODUCTS:
HP Hp Ux,
HP Hp Ux,
HP Hp Ux
... (+3)
Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.
AFFECTED_PRODUCTS:
Avirt Rover
InterScan VirusWall SMTP scanner does not properly scan messages with malformed attachments.
AFFECTED_PRODUCTS:
Trend Micro Interscan Viruswall
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
AFFECTED_PRODUCTS:
Sco Unixware
IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack.
AFFECTED_PRODUCTS:
IBM Network Station Manager
Buffer overflow in w3-msql CGI program in miniSQL package allows remote attackers to execute commands.
AFFECTED_PRODUCTS:
Hughes Msql
WebWho+ whois.cgi program allows remote attackers to execute commands via shell metacharacters in the TLD parameter.
AFFECTED_PRODUCTS:
Tony Greenwood Webwho\+
FTPPro allows local users to read sensitive information, which is stored in plain text.
AFFECTED_PRODUCTS:
1St Choice Software Ftppro
strace allows local users to read arbitrary files via memory mapped file names.
AFFECTED_PRODUCTS:
Linux Linux Kernel,
Paul Kranenburg Strace
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
AFFECTED_PRODUCTS:
Allaire Coldfusion Server,
Allaire Coldfusion Server,
Allaire Coldfusion Server
... (+3)
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
AFFECTED_PRODUCTS:
Allaire Coldfusion Server
Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.
AFFECTED_PRODUCTS:
Netscape Communicator
glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command.
AFFECTED_PRODUCTS:
Glftpd Glftpd
glFtpD includes a default glftpd user account with a default password and a UID of 0.
AFFECTED_PRODUCTS:
Glftpd Glftpd
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
AFFECTED_PRODUCTS:
Microsoft Internet Explorer,
Microsoft Internet Explorer,
Microsoft Internet Explorer
... (+8)
RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.
AFFECTED_PRODUCTS:
Realnetworks Realserver
The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows Recycle Bin utility, which allows attackers to store malicious code without detection.
AFFECTED_PRODUCTS:
Symantec Norton Antivirus,
McAfee Virusscan
Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Outlook Express,
Microsoft Ie
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."
AFFECTED_PRODUCTS:
Netscape Communicator
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Solaris
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
AFFECTED_PRODUCTS:
Sun Sunos,
Sun Solaris
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
AFFECTED_PRODUCTS:
Windowmaker Wmmon
Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.
AFFECTED_PRODUCTS:
Zbsoft Zbserver
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated.
AFFECTED_PRODUCTS:
Sendmail Sendmail
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote attackers to use the server as an amplifier in a "Smurf" style attack on another host, by spoofing the connection request.
AFFECTED_PRODUCTS:
Sgi Quake 1 Server
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
AFFECTED_PRODUCTS:
Sco Unixware,
Windowmaker Wmmon
IIS 4.0 and Site Server 3.0 allow remote attackers to read source code for ASP files if the file is in a virtual directory whose name includes extensions such as .com, .exe, .sh, .cgi, or .dll, aka the "Virtual Directory Naming" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Internet Information Server,
Microsoft Site Server,
Microsoft Site Server Commerce
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
AFFECTED_PRODUCTS:
Microsoft Internet Information Server,
Microsoft Site Server,
Microsoft Site Server Commerce
Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.
AFFECTED_PRODUCTS:
Lotus Domino Server,
Lotus Domino Server
Lotus Domino HTTP server does not properly disable anonymous access for the cgi-bin directory.
AFFECTED_PRODUCTS:
Lotus Domino Server,
Lotus Domino Server
Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.
AFFECTED_PRODUCTS:
Red Hat Linux
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
AFFECTED_PRODUCTS:
Ipswitch Imail,
Ipswitch Imail,
Ipswitch Imail
... (+3)
DNS PRO allows remote attackers to conduct a denial of service via a large number of connections.
AFFECTED_PRODUCTS:
Man And Mice Dns Pro
wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to the program that does the conversion, e.g. tar or uncompress.
AFFECTED_PRODUCTS:
Red Hat Linux,
Red Hat Linux,
Red Hat Linux
... (+4)
Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
AFFECTED_PRODUCTS:
Novell Groupwise,
Novell Groupwise
Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.
AFFECTED_PRODUCTS:
Netscape Enterprise Server,
Novell Groupwise,
Novell Groupwise
Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
AFFECTED_PRODUCTS:
Symantec Norton Antivirus
Cisco Cache Engine allows a remote attacker to gain access via a null username and password.
AFFECTED_PRODUCTS:
Cisco Cache Engine