CVE-2002-0695

CVE-2002-0695 describes a buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5–2.7, affecting SQL Server 7.0 or 2000. The underlying issue is a buffer overflow in the OpenRowSet path that could allow a remote attacker to execute arbitrary...

CVE-2002-0695: Undefined Security Weakness

Buffer overflow in the Transact-SQL T-SQL OpenRowSet component of Microsoft Data Access Components MDAC 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command...

CVE-2002-1051: Undefined Security Weakness

Format string vulnerability in TrACESroute 6.0 GOLD aka NANOG traceroute allows local users to execute arbitrary code via the -T terminator command line argument...

PT-2002-3091 · Cisco · Cisco As5350 +1

Name of the Vulnerable Software and Affected Versions: Cisco AS5350 IOS version 12.211T Description: The issue allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug, when access control lists ACLs are applied and possibly with ssh running. Note tha...

Motorola Cable Modem DOS

I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...

CVE-1999-1059

CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...

CVE-2001-0558

CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...

CVE-1999-1034

This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...

CVE-1999-1059

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1034

Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...

CVE-2001-0558

T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...

CVE-1999-1059: Undefined Security Weakness

Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...

CVE-1999-1034: Undefined Security Weakness

Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...

Remote buffer overflow in DCOM VB T-SQL debugger

BindView Security Advisory -------- Remote buffer overflow in DCOM VB T-SQL debugger Issue Date: March 27, 2001 Contact: [email protected] Topic: Remote buffer overflow in DCOM VB T-SQL debugger Overview: Microsoft Developer Studio version 6 installs a world-launchable DCOM object, known ...

Дырка в Microsoft Developer Studio (DCOM VB T-SQL debugger buffer overflow)

Устанавливается DCOM-объект с разрешениями на запуск VB T-SQL Debugger в котором присутствует переполнение буфера...

CVE-2001-0167

Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...

CVE-2001-0168

CVE-2001-0168 affects AT&T WinVNC Windows server up to version 3.3.3r7. A buffer overflow in the HTTP handling (vncHTTPConnect/Log.cpp) can be triggered by an overly long HTTP GET when the DebugLevel registry key > 0, allowing remote code execution with the privileges of the VNC server user. P...

CVE-2001-0168

Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...