Concurrent Versions System (CVS) server improperly deallocates memory

Overview A "double-free" vulnerability in the Concurrent Versions System CVS server could allow a remote attacker to execute arbitrary code or commands or cause a denial of service on a vulnerable system. Description CVS is a source code maintenance system that is widely used by open-source...

PT-2002-2814 · Hellbent · Hellbent

Name of the Vulnerable Software and Affected Versions: hellbent version 01 Description: The issue allows remote attackers to determine the full path of the web root directory. This is achieved by sending a GET request with a relative path that includes the root's parent. If the parent is incorrec...

PT-2002-2670 · Iomega · Iomega Nas A300U

Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...

Microsoft Data Access Components RDS Data Stub Remote Overflow

The remote DLL /msadc/msadcs.dll is accessible by anyone. Several flaws have been found in it in the past. We recommend that you restrict access to MSADC only to trusted hosts. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11161; scriptversion "1.41";...

Multiple IPsec implementations do not adequately validate authentication data

Overview IPsec implementations from multiple vendors do not adequately validate the authentication data in IPsec packets, exposing vulnerable systems to a denial of service. Description For background: RFC 2401 Security Architecture for the Internet Protocol RFC 2402 IP Authentication Header RFC...

Microsoft Windows Server Message Block (SMB) fails to properly handle SMB_COM_TRANSACTION packets requesting NetServerEnum2 transaction

Overview Microsoft Server Message Block SMB may crash when it receives a crafted SMBCOMTRANSACTION packet requesting a NetServerEnum2 transaction. Attackers can use this vulnerability to cause a denial of service. Description SMB is a protocol for sharing data and resources between computers. It ...

PT-2002-1727 · Netfilter · Netfilter

Name of the Vulnerable Software and Affected Versions: Netfilter "iptables" versions 1.2.6a and earlier Description: The Network Address Translation NAT capability leaks translated IP addresses in ICMP error messages. Recommendations: For versions 1.2.6a and earlier, consider disabling the NAT...

Oracle Reports Server Reports Web Cartridge (RWCGI60) vulnerable to buffer overflow via database name parameter

Overview A buffer overflow vulnerability in Oracle Reports Server 6i could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Reports Server process. Description Oracle Reports Server is a component of Oracle Application Server that handles client...

Oracle Web Cache contains buffer overflow vulnerabilities

Overview The CERT/CC is aware of a report about "several remotely exploitable buffer overflow vulnerabilities in the Oracle Web Cache Server" that could allow an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Web Cache process. Description The Oracle Web Cac...

Oracle Application Server contains format string vulnerability

Overview The CERT/CC is aware of a report about a "remotely exploitable format string vulnerability in Oracle Application Server" that could allow an unauthenticated, remote attacker to execute arbitrary code on a vulnerable system. Description Oracle Application Server uses the Apache HTTP Serve...

PT-2002-1274 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903 Description: The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script...

Oracle9i Application Server Apache PL/SQL module vulnerable to buffer overflow via HTTP request

Overview A buffer overflow vulnerability exists in the Apache Procedural Language/Structured Query Language PL/SQL module used by Oracle9i Application Server iAS. A maliciously crafted HTTP request made to the PL/SQL module could cause a denial of service or execute arbitrary code with the...

PT-2001-2667 · Oracle · Solaris

Name of the Vulnerable Software and Affected Versions: Solaris versions 8 and earlier Description: The issue allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when the lpd daemon invokes a mail program. Recommendations...

PT-2001-1998 · 6Tunnel · 6Tunnel

Name of the Vulnerable Software and Affected Versions: 6tunnel versions 0.08 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by repeatedly connecting to and disconnecting from the server. This is due to the software not...

PT-2001-1980 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.00 through 3.01 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the pg parameter of the ttawebtop.cgi endpoint...

PT-2001-1995 · Cerberus · Cerberus Ftp Server

Name of the Vulnerable Software and Affected Versions: Cerberus FTP server versions 1.0 through 1.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a large number of "PASV" requests. Recommendations: For Cerberus FTP server versions 1....

PT-2001-1156 · Ibm · Lotus Notes Client

Name of the Vulnerable Software and Affected Versions: Lotus Notes Client R5 Description: The issue concerns the Extended Control List ECL feature of the Java Virtual Machine JVM in the affected software. It allows malicious web site operators to determine the existence of files on the client by...

Input validation error in quikstore.cgi allows attackers to execute commands

Overview The quikstore shopping cart script contains an input validation error that allows attackers to execute commands on affected web servers. Description The quikstore.cgi script is written in Perl and provides its users with shopping cart software for e-commerce transactions. In November 200...

Cisco IOS software vulnerable to DoS via HTTP request containing "?/"

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to force affected switches and routers to crash and reboot. Description To exploit this vulnerability, the IOS HTTP interface must be enabled and the attacker must...

PT-2000-1437 · Bea · Bea Weblogic

Name of the Vulnerable Software and Affected Versions: BEA WebLogic versions 3.1.8 through 4.5.1 Description: The default configuration of the software allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in...