2761 matches found
CVE-2003-1115
CVE-2003-1115 affects Nortel Networks Succession Communication Server 2000’s SIP-T implementation. The SIP stack allows remote attackers to trigger denial of service and potentially execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite. The ava...
CVE-2003-1115: Undefined Security Weakness
The Session Initiation Protocol SIP implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suit...
CVE-2005-0414: Undefined Security Weakness
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with 1 the t parameter or 2 the qu parameter...
CVE-2004-1079: Undefined Security Weakness
Buffer overflow in 1 ncplogin and 2 ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option...
CVE-2002-0695
CVE-2002-0695 describes a buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5–2.7, affecting SQL Server 7.0 or 2000. The underlying issue is a buffer overflow in the OpenRowSet path that could allow a remote attacker to execute arbitrary...
CVE-2002-0695: Undefined Security Weakness
Buffer overflow in the Transact-SQL T-SQL OpenRowSet component of Microsoft Data Access Components MDAC 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command...
CVE-2002-1051: Undefined Security Weakness
Format string vulnerability in TrACESroute 6.0 GOLD aka NANOG traceroute allows local users to execute arbitrary code via the -T terminator command line argument...
PT-2002-3091 · Cisco · Cisco As5350 +1
Name of the Vulnerable Software and Affected Versions: Cisco AS5350 IOS version 12.211T Description: The issue allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug, when access control lists ACLs are applied and possibly with ssh running. Note tha...
Motorola Cable Modem DOS
I've found it trivial to crash the Motorola Surfboard 4200 Cable modem, as installed default by AT&T Broadband Internet. The modem acts as a bridge, but also has an internal RFC1918 IP address 192.168.100.1. Simply nmap'ing the cable user's IP address, ie: nmap -sS -p 1-1024 12.x.x.x will cause i...
CVE-1999-1059
CVE-1999-1059 affects the rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems. The vulnerability enables a remote attacker to execute arbitrary commands via rexecd. The provided documents do not specify affected versions beyond AT&T TCP/IP 4.0, nor do they provide remediation steps ...
CVE-2001-0558
CVE-2001-0558 affects Jana Webserver 2.01 beta 1 and earlier. A remote attacker can cause a denial of service by sending a URL request that includes an MS-DOS device name (e.g., GET /aux HTTP/1.0). Connected sources corroborate the DOS impact via MS-DOS device names; OpenVAS/Nessus references lis...
CVE-2001-0558
T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name i.e. GET /aux HTTP/1.0...
CVE-1999-1034
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...
CVE-1999-1059
Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...
CVE-1999-1034
This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...
CVE-1999-1059: Undefined Security Weakness
Vulnerability in rexec daemon rexecd in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands...
CVE-1999-1034: Undefined Security Weakness
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...
CVE-2001-0167
Buffer overflow in AT&T WinVNC Virtual Network Computing client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string...
CVE-2001-0168
Buffer overflow in AT&T WinVNC Virtual Network Computing server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0...