9527 matches found
CVE-2000-0445
The pgpk command in PGP 5.x on Unix systems uses an insufficiently random data source for non-interactive key pair generation, which may produce predictable keys...
CVE-2000-0536
xinetd 2.1.8.x does not properly restrict connections if hostnames are used for access control and the connecting host does not have a reverse DNS entry...
CVE-2000-0641
Savant web server allows remote attackers to execute arbitrary commands via a long GET request...
CVE-2000-0637
Microsoft Excel 97 and 2000 allows an attacker to execute arbitrary commands by specifying a malicious .dll using the Register.ID function, aka the "Excel REGISTER.ID Function" vulnerability...
CVE-2000-0009
The bnapass program in Optivity NETarchitect uses the PATH environmental variable for finding the "rm" program, which allows local users to execute arbitrary commands...
/doc/packages Directory Browsable (deprecated)
The /doc/packages directory is browsable. This directory contains the versions of the packages installed on this host. A remote attacker can use this information to mount further attacks. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVE...
Sun Java Web Server bboard Servlet Command Execution
The 'bboard' servlet is installed in /servlet/sunexamples.BBoardServlet. This servlet comes with default installations of Sun Java Web Server and has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2000-0352
Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execute arbitrary commands via a malformed URL...
CVE-2000-0015
CascadeView TFTP server allows local users to gain privileges via a symlink attack...
CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-2000-0610
NetWin dMailWeb and cwMail 2.6g and earlier allows remote attackers to bypass authentication and use the server for mail relay via a username that contains a carriage return...
CVE-2000-0520
Buffer overflow in restore program 0.4b17 and earlier in dump package allows local users to execute arbitrary commands via a long tape name...
CVE-1999-0856
login in Slackware 7.0 allows remote attackers to identify valid users on the system by reporting an encryption error when an account is locked or does not exist...
CVE-1999-0210
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters...
CVE-1999-0856
CVE-1999-0856 affects Slackware 7.0. The vulnerability arises because remote authentication feedback reveals whether an account exists or is locked by reporting an encryption error, enabling user enumeration. The issue is tied to the login process and causes disclosure of valid user names without...
CVE-2000-0476
xterm, Eterm, and rxvt allow an attacker to cause a denial of service by embedding certain escape characters which force the window to be resized...
CVE-2000-0390
Buffer overflow in krb425convprincipal function in Kerberos 5 allows remote attackers to gain root privileges...
