Sun Java Web Server bboard Servlet Command Execution

The 'bboard' servlet is installed in /servlet/sunexamples.BBoardServlet. This servlet comes with default installations of Sun Java Web Server and has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network...

CVE-2000-0352

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL...

CVE-2000-0015

CascadeView TFTP server allows local users to gain privileges via a symlink attack...

CVE-1999-0378

InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...

CVE-2000-0371

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...

CVE-2000-0610

NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...

CVE-2000-0520

Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name...

CVE-1999-0856

login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist...

CVE-1999-0210

Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...

CVE-1999-0856

CVE-1999-0856 affects Slackware 7.0. The vulnerability arises because remote authentication feedback reveals whether an account exists or is locked by reporting an encryption error, enabling user enumeration. The issue is tied to the login process and causes disclosure of valid user names without...

CVE-2000-0476

xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...

CVE-2000-0390

Buffer overflow in krb425convprincipal function in Kerberos 5 allows remote attackers to gain root privileges...

Дыра в EMURL

Возможно обратиться к содержимого любого почтового ящика в системе, т.к. для идентификации пользователя используется основанный на имени идентификатор без пароля...

CVE-2000-0383

The file transfer component of AOL Instant Messenger AIM reveals the physical path of the transferred file to the remote recipient...

CVE-1999-1005

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. dot dot attack using the HELP parameter...

CVE-2000-0337

Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter...

CVE-1999-0888

dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLEHOME environmental variable, which dbsnmp uses to find the nmiconf.tcl script...

CVE-1999-0747

Denial of service in BSDi Symmetric Multiprocessing SMP when an fstat call is made when the system has a high CPU load...

CVE-1999-0701

After an unattended installation of Windows NT 4.0, an installation file could include sensitive information such as the local Administrator password...

CVE-2000-0252

The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable...