Off-by-one Error

A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

CVEs (230)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2002-1816 1Redshift 1Atphttpd Apr 16, 2026 Dec 31, 2002 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Off-by-one buffer overflow in the sock_gets function in sockhelp.c for ATPhttpd 0.4b and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVE-2002-1745 1Microsoft 1Internet Information Services Apr 16, 2026 Dec 31, 2002 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc,...Show more Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.Show less
CVE-2002-1721 1Pldaniels 1Altermime Apr 16, 2026 Dec 31, 2002 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
CVE-2002-0844 1Distrotech 1Cvs Apr 16, 2026 Aug 12, 2002 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.
CVE-2002-0653 1Modssl 1Mod Ssl Apr 16, 2026 Jul 11, 2002 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user v...Show more Off-by-one buffer overflow in the ssl_compat_directive function, as called by the rewrite_command hook for mod_ssl Apache module 2.8.9 and earlier, allows local users to execute arbitrary code as the Apache server user via .htaccess files with long entries.Show less
CVE-2002-0083 9Conectiva EngardelinuxImmunix+6 more 11Immunix LinuxLinux+8 more Apr 16, 2026 Mar 15, 2002 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
CVE-2001-1496 1Acme 1Thttpd Apr 16, 2026 Dec 31, 2001 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVE-2001-0609 1Infodrom 1Cfingerd Apr 16, 2026 Aug 2, 2001 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
CVE-2001-1391 1Linux 1Linux Kernel Apr 16, 2026 Apr 17, 2001 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.
CVE-1999-1568 1Ncftp 1Ncftpd Server Apr 16, 2026 Jan 1, 1999 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Off-by-one error in NcFTPd FTP server before 2.4.1 allows a remote attacker to cause a denial of service (crash) via a long PORT command.

Previous 1...8 9 10 1112