OSVDB: Open Sourced Vulnerability Database

Browse Database

Browsing Vulnerabilities Disclosed in July of 1997

OSVDB ID	Disclosure Date	Title
11633 [CLOSE] OSVDB ID : 11633 - Disclosed: 1997-07-31 Description: (Description Provided by CVE) : The Perl fingerd program allows arbitrary command execution from remote users.	1997-07-31	Perl fingerd Arbitrary Remote Command Execution
938 [CLOSE] OSVDB ID : 938 - Disclosed: 1997-07-30 Description: (Description Provided by CVE) : Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.	1997-07-30	Solaris nss_nisplus.so.1 NIS+ Local Overflow
5862 [CLOSE] OSVDB ID : 5862 - Disclosed: 1997-07-26 Description: (Description Provided by CVE) : The Java Web Server would allow remote users to obtain the source code for CGI programs.	1997-07-26	Java Web Server Crafted Request CGI Source Disclosure
9413 [CLOSE] OSVDB ID : 9413 - Disclosed: 1997-07-23 Description: (Description Provided by CVE) : Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a long HTTP GET request.	1997-07-23	Oracle Webserver PL/SQL Stored Procedure GET Request DoS
989 [CLOSE] OSVDB ID : 989 - Disclosed: 1997-07-21 Description: (Description Provided by CVE) : Buffer overflow in AIX lchangelv gives root access.	1997-07-21	IBM AIX lchangelv Local Overflow
7969 [CLOSE] OSVDB ID : 7969 - Disclosed: 1997-07-21 Description: A local overflow exists in AIX ping. The AIX ping fails to check command line arguments length resulting in a buffer overflow. With a specially crafted request, an attacker can execute arbitrary commands resulting in a loss of integrity.	1997-07-21	IBM AIX ping Command Line Argument Overflow
7160 [CLOSE] OSVDB ID : 7160 - Disclosed: 1997-07-21 Description: (Description Provided by CVE) : Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file.	1997-07-21	Exim .forward :include: Option Privilege Escalation
1450 [CLOSE] OSVDB ID : 1450 - Disclosed: 1997-07-21 Description: (Description Provided by CVE) : Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.	1997-07-21	INN nnrpd Remote Overflow
1247 [CLOSE] OSVDB ID : 1247 - Disclosed: 1997-07-17 Description: Unknown / Incomplete	1997-07-17	IRCnet IRCD send.c Unspecified Overflow
8218 [CLOSE] OSVDB ID : 8218 - Disclosed: 1997-07-17 Description: A local overflow exists in the 'ld.so' dynamic linkers in some Linux distributions. By forcing an error while calling a dynamically linked setuid program with a long program name (argv[0]), a local attacker can overflow a buffer and execute arbitrary code on the system and use this vulnerability to gain root privileges on the system.	1997-07-17	Linux ld.so Program Name Overflow
8219 [CLOSE] OSVDB ID : 8219 - Disclosed: 1997-07-17 Description: A local overflow exists in the 'ld-linux.so' dynamic linkers in some Linux distributions. By forcing an error while calling a dynamically linked setuid program with a long program name (argv[0]), a local attacker can overflow a buffer and execute arbitrary code on the system gaining root privileges.	1997-07-17	Linux ld-linux.so Program Name Overflow
83126 [CLOSE] OSVDB ID : 83126 - Disclosed: 1997-07-16 Description: Microsoft Windows NT contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered by the HKeyLocalMachine\SECURITY\Policy\Secrets\ registry key containing plaintext passwords to running services. This may allow a local attacker to gain information to password information.	1997-07-16	Microsoft Windows NT Registry Plaintext Service Password Local Disclosure
29 [CLOSE] OSVDB ID : 29 - Disclosed: 1997-07-15 Description: (Description Provided by CVE) : The campas CGI program provided with some NCSA web servers allows an attacker to execute arbitrary commands via encoded carriage return characters in the query string, as demonstrated by reading the password file.	1997-07-15	NCSA campas CGI Arbitrary Command Execution
164 [CLOSE] OSVDB ID : 164 - Disclosed: 1997-07-14 Description: IRIX contains a flaw that may allow a malicious attacker to obtain a complete listing of files and directories on vulnerable systems. The issue is triggered when the File Altercation Monitor (fam) daemon is instructed by a program to monitor the root directory. It is possible that the flaw may allow retrieval of all files under the root directory, resulting in a loss of confidentiality.	1997-07-14	IRIX File Alteration Monitor (fam) Arbitrary Directory Listing
8423 [CLOSE] OSVDB ID : 8423 - Disclosed: 1997-07-10 Description: A local overflow exists in SGI IRIX. The pset program fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary commands execution with root privileges resulting in a loss of integrity.	1997-07-10	IRIX pset Argument Handling Local Overflow
236 [CLOSE] OSVDB ID : 236 - Disclosed: 1997-07-10 Description: (Description Provided by CVE) : The Webgais program allows a remote user to execute arbitrary commands.	1997-07-10	WebGais webgais CGI Arbitrary Command Execution
2917 [CLOSE] OSVDB ID : 2917 - Disclosed: 1997-07-09 Description: Microsoft Access has a flaw in the encryption used to protect databases. The RC4 based encryption uses the same key for both encryption and decryption with no password/phrase. By creating a database equal in size as the target database, an attacker can use the XOR'd key stream from the newly created database to decrypt the target database.	1997-07-09	Microsoft Access Known Database Attack
7873 [CLOSE] OSVDB ID : 7873 - Disclosed: 1997-07-08 Description: (Description Provided by CVE) : JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability.	1997-07-08	Multiple Browser JavaScript Web Activity Disclosure
11289 [CLOSE] OSVDB ID : 11289 - Disclosed: 1997-07-08 Description: (Description Provided by CVE) : A remote attacker can read information from a Netscape user's cache via JavaScript.	1997-07-08	Netscape JavaScript Remote Cache Disclosure
237 [CLOSE] OSVDB ID : 237 - Disclosed: 1997-07-04 Description: (Description Provided by CVE) : websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).	1997-07-04	WebGais websendmail CGI Arbitrary Command Execution
82 [CLOSE] OSVDB ID : 82 - Disclosed: 1997-07-02 Description: (Description Provided by CVE) : The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands.	1997-07-02	Glimpse HTTP aglimpse Arbitrary Command Execution
957 [CLOSE] OSVDB ID : 957 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : Buffer overflow in FTP Serv-U 2.5 allows remote authenticated users to cause a denial of service (crash) via a long (1) CWD or (2) LS (list) command.	1997-07-01	Serv-U FTP Server CWD Command Overflow
8422 [CLOSE] OSVDB ID : 8422 - Disclosed: 1997-07-01 Description: A local overflow exists in SGI IRIX. The df program fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary commands execution with root privileges resulting in a loss of integrity.	1997-07-01	IRIX df Local Overflow
8426 [CLOSE] OSVDB ID : 8426 - Disclosed: 1997-07-01 Description: A local overflow exists in SGI IRIX. The ordist program fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary commands execution with root privileges resulting in a loss of integrity.	1997-07-01	IRIX ordist Local Overflow
198 [CLOSE] OSVDB ID : 198 - Disclosed: 1997-07-01 Description: Sendmail contains a flaw that may allow a remote attacker to relay mail through the server. In older versions of sendmail, default configurations allowed many methods of e-mail relay. This allowed a remote attacker to send mail through the server and cause the email to appear to come from the victim server. This makes it more difficult to easily spot where the mail comes from and allows basic e-mail spoofing. This practice is typically referred to "sending spam" or "spamming".	1997-07-01	Sendmail Multiple Method E-mail Relay
958 [CLOSE] OSVDB ID : 958 - Disclosed: 1997-07-01 Description: Remote attackers can cause a denial of service in FTP by issuing multiple PASV commands, causing the server to run out of available ports.	1997-07-01	Multiple Vendor FTP Multiple PASV Command Port Exhaustion DoS
5873 [CLOSE] OSVDB ID : 5873 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : wu-ftpd FTP daemon allows any user and password combination.	1997-07-01	WU-FTPD Any User/Password Authentication
8425 [CLOSE] OSVDB ID : 8425 - Disclosed: 1997-07-01 Description: A local overflow exists in SGI IRIX. The scheme program fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request, a malicious user can cause arbitrary commands execution with root privileges resulting in a loss of integrity.	1997-07-01	IRIX scheme Local Overflow
9735 [CLOSE] OSVDB ID : 9735 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.	1997-07-01	ISC BIND -DALLOW_UPDATES Option Remote Record Modification
10604 [CLOSE] OSVDB ID : 10604 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.	1997-07-01	Microsoft Windows NT PATH Working Directory Inclusion
10616 [CLOSE] OSVDB ID : 10616 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.	1997-07-01	Microsoft Windows NT Fragmented IP Packet Firewall Restriction Bypass
59250 [CLOSE] OSVDB ID : 59250 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service.	1997-07-01	Microsoft Windows NT Fragmented Packet Handling Remote DoS (ntfrag)
59251 [CLOSE] OSVDB ID : 59251 - Disclosed: 1997-07-01 Description: (Description Provided by CVE) : Buffer overflow in ircd allows arbitrary command execution.	1997-07-01	Dalnet IRCd SERVER Message Remote Overflow

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.