CVE Database

Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.

Cisco Cache Engine allows a remote attacker to gain access via a null username and password.

The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.

An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.

The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.

Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.

Error messages generated by gdm with the VerboseAuth setting allows an attacker to identify valid users on a system.

Internet Anywhere POP3 Mail Server allows local users to cause a denial of service via a malformed RETR command.

The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

dump in Debian GNU/Linux 2.1 does not properly restore symlinks, which allows a local user to modify the ownership of arbitrary files.

Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.

The default permissions for Endymion MailMan allow local users to read email or modify files.

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.

Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.

FreeBSD gdc program allows local users to modify files via a symlink attack.

Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.

Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.

Denial of service in BIND named via naptr.

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.

Alibaba web server allows remote attackers to execute commands via a pipe character in a malformed URL.

By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.

Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.

shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decrypt and obtain the source code.

FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.

The SSH authentication agent follows symlinks via a UNIX domain socket.

sccw allows local users to read arbitrary files.

FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.