1612 matches found
CVE-2002-0331
CVE-2002-0331 describes a directory traversal vulnerability in the HTTP server of BPM Studio Pro 4.2, enabling remote attackers to read arbitrary files by using a dot-dot sequence in the HTTP request. Per the provided records, the impact is listed as confidentiality: none , integrity: partial , a...
CVE-2002-0281
CVE-2002-0281 concerns a cross-site scripting vulnerability in DCP-Portal 4.2 and earlier . The root cause is that an attacker can inject JavaScript in the job information field submitted to the endpoint user_update.php , potentially allowing escalation of privileges to other portal users. The in...
CVE-2002-0133
CVE-2002-0133 affects Avirt Gateway Suite 4.2. The vulnerability is a buffer overflow in components handling proxies, exploitable by sending excessively long header fields to the HTTP proxy or a long string to the telnet proxy. Reported effects include remote denial of service and potential arbit...
CVE-2001-1154
CVE-2001-1154 affects Cyrus mail servers (versions 2.0.15, 2.0.16, and 1.6.24) running on BSDi 4.2 with IMAP enabled. The issue allows remote attackers to cause a denial-of-service condition (hang) by leveraging PHP IMAP clients. The available documents confirm the affected software stack and the...
CVE-2001-0740
CVE-2001-0740 affects 3COM OfficeConnect 812/840 ADSL Router with OCR812 router software version 1.1.9 and earlier. The vulnerability is a potential format string flaw triggered by a long string containing many "%s" sequences, which can cause a denial of service via remote access. The connected d...
CVE-1999-1032
Vulnerability in LAT/Telnet Gateway lattelnet on Ultrix 4.1 and 4.2 allows attackers to gain root privileges...
CVE-2001-0371
CVE-2001-0371 describes a race condition in the UFS and EXT2FS file systems affecting FreeBSD 4.2 and earlier (and possibly other operating systems). The vulnerability allows a local user to access data that has already been deleted but not yet zeroed out, leading to exposure of otherwise restric...
CVE-1999-1032
CVE-1999-1032 concerns a vulnerability in the LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 that allows attackers to obtain root privileges. The available documents identify the affected software (LAT/Telnet Gateway on Ultrix 4.1/4.2) and the outcome (root privilege escalation) but do not ...
CVE-1999-1331
Affected software: netcfg 2.16-1 on Red Hat Linux 4.2. Vulnerability: Local users can control the Ethernet interface on reboot when a specific option is set, enabling a denial of service by shutting down the interface. Root cause/trigger: The description indicates the interface control occurs at ...
CVE-1999-1117
CVE-1999-1117 affects IBM AIX 4.1 and 4.2 where the lquerypv component can be exploited locally to read arbitrary files by supplying a file path in the -h argument. The underlying issue is a local access vulnerability impacting confidentiality (per CVSS: Partial). No explicit exploit code, workar...
CVE-1999-1208
The CVE-1999-1208 entry describes a buffer overflow in the ping utility on AIX versions 4.2 and earlier. The root cause is a buffer overrun triggered by a long command line argument, allowing local users to gain root privileges. Public references in the provided records confirm the vulnerable com...
CVE-2001-0094
CVE-2001-0094 describes a buffer overflow in the kdc_reply_cipher() of the KTH Kerberos IV library (libkrb) used by NetBSD 1.5 and FreeBSD 4.2 and earlier, enabling a local attacker to gain root privileges or cause a crash by crafting an authentication reply. Exploitation may be facilitated when ...
CVE-2001-0968
Knox Arkeia server 4.2 (and possibly other versions) installs its root user with a null password by default, enabling privilege escalation for local and remote users. The available documents describe the vulnerable condition but do not specify patches or fixes. No explicit exploit details or reme...
CVE-2001-0967
Knox Arkeia server (notably version 4.2) uses a constant salt when hashing passwords via crypt(), enabling easier brute‑force guessing. The root cause is the non‑unique salt value in password encryption, which compromises password strength. The PT-2001-2119 advisory aligns with this, describing t...
CVE-2001-0855
CVE-2001-0855 details a buffer overflow in db_loader of ClearCase 4.2 and earlier, exploitable by a long TERM environment variable to gain root privileges locally. Affected software: ClearCase (db_loader) on version 4.2 and earlier. Root cause: buffer overflow triggered by unbounded TERM value. I...
CVE-1999-1415
Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges...
CVE-1999-1304
The CVE-1999-1304 entry concerns SCO UNIX 4.2 and earlier, where a login vulnerability allows local users to gain root access. The available documents reiterate a local privilege escalation through the login process, with no explicit exploit details, affected component unknown beyond the login me...
CVE-1999-1303
CVE-1999-1303 affects SCO UNIX 4.2 and earlier, with the prwarn component enabling local users to gain root privileges. The connected sources confirm the vulnerability and impact (local, high severity, CVSSv2 7.2), but do not provide additional details on affected binary versions beyond the SCO U...
