Latest Vulnerabilities with Public Exploits

A Windows NT domain user or administrator account has a default, null, blank, or missing password.

The rsh/rlogin service is running.

An account on a router, firewall, or other network device has a default, null, blank, or missing password.

A Unix account has a default, null, blank, or missing password.

An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server.

Remote attackers can mount an NFS file system in Ultrix or OSF, even if it is denied on the access list.

A Windows NT local user or administrator account has a default, null, blank, or missing password.

Echo and chargen, or other combinations of UDP services, can be used in tandem to flood the server, a.k.a. UDP bomb or UDP packet storm.

The ARP protocol allows any host to spoof ARP replies and poison the ARP cache to conduct IP address spoofing or a denial of service.

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->".

The Remote Data Service (RDS) DataFactory component of Microsoft Data Access Components (MDAC) in IIS 3.x and 4.x exposes unsafe methods, which allows remote attackers to execute arbitrary commands.

Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.

Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.

Buffer overflow in War FTP allows remote execution of commands.

The SunView (SunTools) selection_svc facility allows remote users to read files.

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

An SNMP community name is the default (e.g. public), null, or missing.

Land IP denial of service.

WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.