A list of stnadardized names for vulnerabilities and other information security exposures - CVE aims to standardize the names for all publicly known vulnerabilities and security exposures.

A community wide effort - The content of CVE is a result of a collaborative effort of the CVE Editorial Board. The Editorial Board includes representatives from over 20 security-related organizations such as security tool vendors, academic institutions, and government as well as other prominent security experts. The MITRE Corporation maintains CVE and moderates Editorial Board discussions. The CVE site can be found at cve.mitre.org.

CVE No.	Description	SARA Test
CVE-1999-0002	Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.	rpc(mountd) check
CVE-1999-0003	Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd)	rpc(tooltalk) check
CVE-1999-0005	Arbitrary command execution via IMAP buffer overflow in authenticate command.	imap version check
CVE-1999-0006	Buffer overflow in POP servers based on BSD/Qualcomm's qpopper allows remote attackers to gain root access using a long PASS command.	pop version check
CVE-1999-0008	Buffer overflow in NIS+, in Sun's rpc.nisd program	rpc(nisd) check
CVE-1999-0009	Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.	dns version check
CVE-1999-0010	Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.	dns version check
CVE-1999-0011	Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.	dns version check
CVE-1999-0013	Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.	ssh version check
CVE-1999-0017	FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.	ftp bounce test
CVE-1999-0018	Buffer overflow in statd allows root privileges.	rpc(statd) check
CVE-1999-0019	Delete or create a file via rpc.statd, due to invalid information.	rpc(statd) check
CVE-1999-0021	Arbitrary command execution via buffer overflow in Count.cgi (wwwcount) cgi-bin program.	cgi(Count.cgi) check
CVE-1999-0024	DNS cache poisoning via BIND, by predictable query IDs.	dns version check
CVE-1999-0039	Arbitrary command execution using webdist CGI program in IRIX.	cgi(webdist) check
CVE-1999-0042	Buffer overflow in University of Washington's implementation of IMAP and POP servers.	imap and pop3 version check
CVE-1999-0043	Command execution via shell metachars in INN daemon (innd) 1.5 using newgroup and rmgroup control messages, and others.	inn version check
CVE-1999-0045	List of arbitrary files on Web host via nph-test-cgi script	cgi(nph-test-cgi) check
CVE-1999-0046	Buffer overflow of rlogin program using TERM environmental variable.	rlogin check
CVE-1999-0047	MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.	sendmail version check
CVE-1999-0058	Buffer overflow in PHP cgi program, php.cgi allows shell access.	cgi(nph-test-cgi) test
CVE-1999-0059	IRIX fam service allows an attacker to obtain a list of all files on the server.	rpc(sgi_fam) check
CVE-1999-0067	CGI phf program allows remote command execution through shell metacharacters.	cgi(phf) test
CVE-1999-0068	CGI PHP mylog script allows an attacker to read any file on the target server.	cgi(php) test
CVE-1999-0070	test-cgi program allows an attacker to list files on the server	cgi(test-cgi) check
CVE-1999-0071	Apache httpd cookie buffer overflow for versions 1.1.1 and earlier.	Apache version check
CVE-1999-0080	wu-ftp FTP server allows root access via site exec command.	wu-ftp version check
CVE-1999-0081	wu-ftp allows files to be overwritten via the rnfr command.	wu-ftp version check
CVE-1999-0082	CWD ~root command in ftpd allows root access.	ftp version check
CVE-1999-0083	getcwd() file descriptor leak in FTP	ftp version check
CVE-1999-0099	Buffer overflow in syslog utility allows local or remote attackers to gain root privileges.	syslog check
CVE-1999-0100	Remote access in AIX innd 1.5.1, using control messages.	inn version check
CVE-1999-0103	Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.	chargen check
CVE-1999-0131	Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.	sendmail version check
CVE-1999-0142	The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.	kerberos check
CVE-1999-0146	The campas CGI program provided with some NCSA web servers allows an attacker to read arbitrary files.	cgi(campas) check
CVE-1999-0147	The aglimpse CGI program of the Glimpse package allows remote execution of arbitrary commands	cgi(aglimpse) check
CVE-1999-0148	The handler CGI program in IRIX allows arbitrary command execution.	cgi(handler) test
CVE-1999-0149	The wrap CGI program in IRIX allows remote attackers to view arbitrary directory listings via a .. (dot dot) attack.	cgi(wrap) test
CVE-1999-0150	The Perl fingerd program allows arbitrary command execution from remote users.	finger check
CVE-1999-0152	The DG/UX finger daemon allows remote command execution through shell metacharacters.	finger check
CVE-1999-0161	In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.	tacacs check
CVE-1999-0168	The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.	portmapper test
CVE-1999-0170	Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.	portmapper test
CVE-1999-0174	The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.	cgi(view-source) test
CVE-1999-0176	The Webgais program allows a remote user to execute arbitrary commands.	cgi(webgais) check
CVE-1999-0177	The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.	cgi(uploader) check
CVE-1999-0178	The win-c-sample program in the WebSite web server has a buffer overflow that allows remote execution of commands.	cgi(win-c) check
CVE-1999-0180	in.rshd allows users to login with a NULL username and execute commands.	rsh check
CVE-1999-0183	Linux implementations of TFTP would allow access to files outside the restricted directory.	tftp check
CVE-1999-0185	In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.	ftp bounce test
CVE-1999-0196	The websendmail program in the Webgais program allows a remote user to access arbitrary files.	cgi(webgais) check
CVE-1999-0204	Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.	sendmail version check
CVE-1999-0206	MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.	sendmail version check
CVE-1999-0211	Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone.	nfs check
CVE-1999-0233	IIS allows users to execute arbitrary commands using .bat or .cmd files.	cgi(args) check
CVE-1999-0236	ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.	cgi(ScriptAlias) test
CVE-1999-0239	Netscape FastTrack Web server lists files when a lowercase get command is used instead of an uppercase GET.	FastTrack server test
CVE-1999-0247	Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.	inn version check
CVE-1999-0248	A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.	ssh version check
CVE-1999-0260	The jj CGI program allows command execution via shell metacharacters.	cgi(jj) check
CVE-1999-0262	faxsurvey CGI script on Linux allows remote command execution via shell metacharacters.	cgi(faxsurvey) test
CVE-1999-0264	htmlscript CGI program allows remote read access to files.	cgi(htmlscript) test
CVE-1999-0266	The info2www CGI script allows remote file access or remote command execution.	cgi(info2www) check
CVE-1999-0270	pfdispaly CGI program for SGI's Performer API Search Tool allows read access to files.	cgi(pfdispaly) test
CVE-1999-0289	The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.	Apache version test
CVE-1999-0304	mmap function in BSD allows local attackers in the kmem group to modify memory through devices.	_no_check.html
CVE-1999-0310	SSH 1.2.25 on HP-UX allows access to new user accounts.	ssh version check
CVE-1999-0320	SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.	rpc(cmsd) check
CVE-1999-0365	The metamail package allows remote command execution using shell metacharacters that are not quoted in a mailcap entry.	sendmail version check
CVE-1999-0366	In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.	open SMB shares
CVE-1999-0368	Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.	wu-ftp version check
CVE-1999-0439	Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file.	sendmail version check
CVE-1999-0472	The SNMP default community name public is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it.	snmp test
CVE-1999-0493	rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.	rpc(statd) check
CVE-1999-0514	UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target.	chargen check
CVE-1999-0526	An X server's access control is disabled (e.g. through an xhost + command) and allows anyone to connect to the server.	X-server test
CVE-1999-0566	An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities.	syslog check
CVE-1999-0612	A version of finger is running that exposes valid user information to any entity on the network.	finger test
CVE-1999-0626	A version of rusers is running that exposes valid user information to any entity on the network.	rusers check
CVE-1999-0627	The rexd service is running, which uses weak authentication that can allow an attacker to execute commands.	rex check
CVE-1999-0685	Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option.	Netscape version check
CVE-1999-0695	The Sybase PowerDynamo personal web server allows attackers to read arbitrary files through a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0696	Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd)	rpc(cmsd) test
CVE-1999-0704	Buffer overflow in Berkeley automounter daemon (amd) logging facility provided in the Linux am-utils package and others.	amd check
CVE-1999-0705	Buffer overflow in INN inews program.	inn version check
CVE-1999-0722	The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.	Cobalt server test
CVE-1999-0744	Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.	Netscape version check
CVE-1999-0751	Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.	Netscape version check
CVE-1999-0752	Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.	Netscape version check
CVE-1999-0771	The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.	CIM version check
CVE-1999-0772	Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.	CIM version check
CVE-1999-0833	Buffer overflow in BIND 8.2 via NXT records.	dns version check
CVE-1999-0834	Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.	ssh version check
CVE-1999-0835	Denial of service in BIND named via malformed SIG records.	dns version check
CVE-1999-0837	Denial of service in BIND by improperly closing TCP sessions via so_linger.	dns version check
CVE-1999-0842	Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0848	Denial of service in BIND named via consuming more than fdmax file descriptors.	dns version check
CVE-1999-0849	Denial of service in BIND named via maxdname.	dns version check
CVE-1999-0853	Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.	Netscape version check
CVE-1999-0868	ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.	inn version check
CVE-1999-0878	Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPING_CHDIR.	wu-ftp version check
CVE-1999-0879	Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.	wu-ftp version check
CVE-1999-0880	Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.	wu-ftp version check
CVE-1999-0881	Falcon web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0887	FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0897	iChat ROOMS Webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0915	URL Live! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0927	NTMail allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0933	TeamTrack web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-1999-0950	Buffer overflow in WFTPD FTP server allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.	wu-ftp version check
CVE-1999-0955	Race condition in wu-ftpd and BSDI ftpd allows remote attackers gain root access via the SITE EXEC command.	wu-ftp version check
CVE-1999-0976	Sendmail allows local users to reinitialize the aliases database via the newaliases command, then cause a denial of service by interrupting Sendmail.	_no_check.html
CVE-1999-0977	Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.	rpc(sadmind) checks
CVE-1999-0978	htdig allows remote attackers to execute commands via filenames with shell metacharacters.	cgi(htdig) test
CVE-1999-1005	Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.	dot..dot server attack
CVE-1999-1010	An SSH 1.2.27 server allows a client to use the none cipher, even if it is not allowed by the server policy.	ssh version check
CVE-1999-1011	The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.	IIS RDS Check
CVE-2000-0039	AltaVista search engine allows remote attackers to read files above the document root via a .. (dot dot) in the query.cgi CGI program.	dot..dot server attack
CVE-2000-0144	Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0159	HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges.	password check
CVE-2000-0189	ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.	cgi(coldfusion) check
CVE-2000-0191	Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0207	SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.	cgi(infosrch) check
CVE-2000-0208	The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.	cgi(htsearch) check
CVE-2000-0222	The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.	Account with no password
CVE-2000-0233	SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.	IMAP version check
CVE-2000-0234	The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file.	cgi(cobalt raq) test
CVE-2000-0245	Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.	Objectserver check
CVE-2000-0260	Buffer overflow in the dvwssr.dll DLL in Microsoft Visual Interdev 1.0 allows users to cause a denial of service or execute commands, aka the Link View Server-Side Component vulnerability.	cgi(interdev) test
CVE-2000-0261	The AVM KEN! web server allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0267	Cisco Catalyst 5.4.x allows a user to gain access to the enable mode without a password.	Cisco_catalyst_check
CVE-2000-0282	TalentSoft webpsvr daemon in the Web+ shopping cart application allows remote attackers to read arbitrary files via a .. (dot dot) attack on the webplus CGI program.	webplus dot..dot server attack
CVE-2000-0303	Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.	dot..dot server attack
CVE-2000-0389	Buffer overflow in krb_rd_req function in Kerberos 4 and 5 allows remote attackers to gain root privileges.	kerberos check
CVE-2000-0390	Buffer overflow in krb425_conv_principal function in Kerberos 5 allows remote attackers to gain root privileges.	kerberos check
CVE-2000-0431	Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files.	Cobalt server test
CVE-2000-0436	MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0443	The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0472	Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.	inn version check
CVE-2000-0505	The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.	Apache version check
CVE-2000-0638	Big Brother 1.4h1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0660	The WDaemon web server for WorldClient 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0666	rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges.	rpc(statd) check
CVE-2000-0705	ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.	dot..dot server attack
CVE-2000-0733	Telnetd telnet server in IRIX 5.2 through 6.1 does not properly cleans user-injected format strings, which allows remote attackers to execute arbitrary commands via a long RLD variable in the IAC-SB-TELOPT_ENVIRON request.	IRIX telnetd version
CVE-2000-0782	netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.	netauth directory traversal

CVE References

     CVE No.   

              References