Critical severity CVEs

Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.

ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password.

snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove or clear the directory when snap -a is executed, which coul…

rpc.pcnfsd in HP gives remote root access by changing the permissions on the main printer spool directory.

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

By default, IIS 4.0 has a virtual directory /IISADMPWD which contains files that can be used as proxies for brute force password attacks, or to identify valid users on the system.

The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command.

Versions of rpcbind including Linux, IRIX, and Wietse Venema's rpcbind allow a remote attacker to insert and delete entries by spoofing a source address.

Internet Explorer 4.01 allows remote attackers to read local files and spoof web pages via a "%01" character in an "about:" Javascript URL, which causes Internet Explorer to use t…

ControlIT v4.5 and earlier uses weak encryption to store usernames and passwords in an address book.

Windows NT 4.0 beta allows users to read and delete shares.

Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary commands.

finger 0@host on some systems may print information on some user accounts.

finger .@host on some systems may print information on some user accounts.

Windows NT FTP server (WFTP) with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password.

Attackers can do a denial of service of IRC by crashing the server.

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.

Linux cfingerd could be exploited to gain root access.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

Buffer overflow in ircd allows arbitrary command execution.

MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.

The Java Web Server would allow remote users to obtain the source code for CGI programs.

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection.

In some NT web servers, appending a space at the end of a URL may allow attackers to read source code for active pages.

NetWare version of LaserFiche stores usernames and passwords unencrypted, and allows administrative changes without logging.