websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).

Denial of service in RPC portmapper allows attackers to register or unregister RPC services or spoof RPC services using a spoofed source IP address such as 127.0.0.1.

Denial of service in in.comsat allows attackers to generate messages.

Denial of service in Ascend and 3com routers, which can be rebooted by sending a zero length TCP option.

Buffer overflow in telnet daemon tgetent routing allows remote attackers to gain root access via the TERMCAP environmental variable.

IIS newdsn.exe CGI script allows remote users to overwrite files.

Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.

Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111.

The passwd command in Solaris can be subjected to a denial of service.

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-1999-0022. Reason: This candidate is a duplicate of CVE-1999-0022. Notes: All CVE users should reference CVE-1999-0022 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.

In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.

When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.

Linux implementations of TFTP would allow access to files outside the restricted directory.

Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.

The wall daemon can be used for denial of service, social engineering attacks, or to execute remote commands.

in.rshd allows users to login with a NULL username and execute commands.

Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.

Buffer overflow in the win-c-sample program (win-c-sample.exe) in the WebSite web server 1.1e allows remote attackers to execute arbitrary code via a long query string.

The uploader program in the WebSite web server allows a remote attacker to execute arbitrary programs.