| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| AIX bugfiler program allows local users to gain root access. |
| The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames. |
| Buffer overflow in ffbconfig in Solaris 2.5.1. |
| The printers program in IRIX has a buffer overflow that gives root access to local users. |
| Finger redirection allows finger bombs. |
| A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. |
| Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm. |
| Buffer overflow in SLmail 3.x allows attackers to execute commands using a large FROM line. |
| EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash). |
| Buffer overflow in AIX and Solaris "gethostbyname" library call allows root access through corrupt DNS host names. |
| PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code. |
| Remote access in AIX innd 1.5.1, using control messages. |
| Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters. |
| Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. |
| Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin. |
| Buffer overflow in SMTP HELO command in Sendmail allows a remote attacker to hide activities. |
| Sendmail decode alias can be used to overwrite sensitive files. |
| Various vulnerabilities in the AIX portmir command allows local users to obtain root access. |
| Buffer overflow in AIX writesrv command allows local users to obtain root access. |
| Buffer overflow in AIX rcp command allows local users to obtain root access. |