CVE-2003-0402

CVE-2003-0402 affects Vignette StoryServer 5 and Vignette V/5, where the default login template (/vgn/login) returns different responses depending on whether a user exists. This behavior allows remote attackers to identify valid usernames via brute force, enabling username enumeration. The NVD en...

CVE-2003-0399

CVE-2003-0399 affects Vignette StoryServer 4/5 and V/5 (and possibly other versions). The vulnerability allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template, indicating abuse of session/authen...

CVE-2003-0403

CVE-2003-0403 affects Vignette StoryServer 5 and Vignette V/5. Remote attackers can read and modify license information and cause a denial of service by directly accessing the /vgn/license template. The provided documents do not include root-cause analysis, affected versions beyond the products n...

CVE-2003-0401

Affected software/impact (summary). CVE-2003-0401 affects Vignette StoryServer and Vignette V/5. The vulnerability is describ ed as allowing remote attackers to obtain sensitive information by requesting the /vgn/style template. The NVD entry provides a network-accessible impact with partial conf...

CVE-2003-0401

Vignette StoryServer and Vignette V/5 allows remote attackers to obtain sensitive information via a request for the /vgn/style template...

Solaris 2.x/7.0/8 - Derived 'login' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions of 'login' descended from System ...

CVE-2002-2212

The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...

Domain Name System (DNS) stub resolver libraries vulnerable to buffer overflows via network name or address lookups

Overview The DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10 contains buffer overflows in code that handles responses for network name and address requests. Other resolver libraries derived from BIND 4 such as BSD libc, GNU glibc, and those used by System V UNIX systems may also be...

Buffer overfllow in /bin/login under System V

Buffer overflow on large name= request. Heap overflow in TTYPROMPT is trivially exploitable with remote root compromise...

CVE-2001-1397

The System V SYS5 shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory...

CVE-2001-1397

CVE-2001-1397 affects the System V shared memory implementation in the Linux kernel before version 2.2.19. The issue allows attackers to modify recently freed memory within SYSV shared memory. Public sources consistently describe this as a kernel memory handling flaw rather than a user-space vuln...

CVE-2001-0797

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin...

CVE-2001-0797

A buffer overflow vulnerability exists in the System V derived /bin/login program across various operating systems, including Solaris/SunOS, HP-UX, AIX, IRIX, and Unixware . The root cause is the improper handling of a large number of extraneous arguments or environment variables . This allows re...

CVE-2001-1294

CVE-2001-1294 describes a buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier, allowing remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password. The connected records confirm the affected software and the impact (availability). Root ca...

CVE-2001-1294

Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service crash in the Webmail interface via a long username and password...

CVE-1999-1138

The CVE affects SCO UNIX System V/386 Release 3.2 and other SCO products. Its description states that home directories are created under /tmp (dos user) and /usr/tmp (asg user), which are world-writable, enabling other users to access those accounts. The underlying issue is the use of world-writa...

CVE-1999-1034

This CVE (CVE-1999-1034) is a local privilege escalation in the login component of AT&T System V Release 4. The NVD entry lists a base score of 7.2 (HIGH) with Local attack vector, low attack complexity, no authentication required, and complete impact on confidentiality, integrity, and availabili...

CVE-1999-1321

Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing...

CVE-1999-1034

Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges...

CVE-1999-1163

CVE-1999-1163 describes a vulnerability in HP Series 800 S/X/V Class servers where the Service Support Processor (SSP) Teststation allows remote attackers to gain access to the S/X/V Class console. The NVD entry lists an attack vector of NETWORK with no authentication and indicates partial impact...