| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Golden FTP Server Pro 2.52 allows remote attackers to obtain sensitive information via a GET request for a file that does not exist, which reveals the absolute path of the FTP server in the resulting FTP error message. |
| TCP RST denial of service in FreeBSD. |
| Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access. |
| AIX routed allows remote users to modify sensitive files. |
| AIX piodmgrsu command allows local users to gain additional group privileges. |
| htmlscript CGI program allows remote read access to files. |
| Progressive Networks Real Video server (pnserver) can be crashed remotely. |
| SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. |
| SSH 1.2.25 on HP-UX allows access to new user accounts. |
| Linux bdash game has a buffer overflow that allows local users to gain root access. |
| Buffer overflow in Internet Explorer 4.0(1). |
| Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. |
| Linux PAM modules allow local users to gain root access using temporary files. |
| A malicious Palace server can force a client to execute arbitrary programs. |
| A remote attacker can gain access to a file system using .. (dot dot) when accessing SMB shares. |
| UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. |
| A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc. |
| A system is operating in "promiscuous" mode which allows it to perform packet sniffing. |
| A trust relationship exists between two Unix hosts. |
| A superfluous NFS server is running, but it is not importing or exporting any file systems. |
