CVE Database

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.

Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.

The RPC portmapper service is running.

Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.

IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash.

Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, which allows remote attackers to guess usernames or passwords via a brute force attack.

Solaris ufsrestore buffer overflow.

Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.

root privileges via buffer overflow in ordist command on SGI IRIX systems.

IRIX fam service allows an attacker to obtain a list of all files on the server.

IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files.

webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

Buffer overflow in xlock program allows local users to execute commands as root.

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

Local user gains root privileges via buffer overflow in rdist, via expstr() function.

Certain NFS servers allow users to use mknod to gain privileges by creating a writable kmem device and setting the UID to 0.