Archive
January 2001
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22232
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
232 results · Feed
-
Unscored —
Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAM…
-
Unscored —
The inter-module authentication mechanism (fwa1) in Check Point VPN-1/FireWall-1 4.1 and earlier may allow remote attac…
-
Unscored —CVE-2000-0883 Public exploit
The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directo…
-
Unscored —CVE-2000-0922 Public exploit
Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier …
-
Unscored —
Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitra…
-
Unscored —
The OPSEC communications authentication mechanism (fwn1) in Check Point VPN-1/FireWall-1 4.1 and earlier allows remote …
-
Unscored —
Worm HTTP server allows remote attackers to cause a denial of service via a long URL.
-
Unscored —CVE-2000-0953 Public exploit
Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.
-
Unscored —
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comma…
-
Unscored —
Buffer overflow in listmanager earlier than 2.105.1 allows local users to gain additional privileges.
-
Unscored —CVE-2000-0919 Public exploit
Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary file…
-
Unscored —CVE-2000-0824 Public exploit
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twic…
-
Unscored —
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone tra…
-
Unscored —CVE-2000-0993 Public exploit
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via …
-
Unscored —
SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configu…
-
Unscored —CVE-2000-0936 Public exploit
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, …
-
Unscored —
The NSAPI plugins for TGA and the Java Servlet proxy in HP-UX VVOS 10.24 and 11.04 allows an attacker to cause a denial…
-
Unscored —CVE-2000-0958 Public exploit
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named win…
-
Unscored —
Buffer overflow in ITHouse mail server 1.04 allows remote attackers to execute arbitrary commands via a long RCPT TO ma…
-
Unscored —
Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands v…
-
Unscored —CVE-2000-0930 Public exploit
Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol w…
-
Unscored —CVE-2000-0048 Public exploit
get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp …
-
Unscored —
Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU util…
-
Unscored —
Watchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentica…
-
Unscored —
MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote at…
-
Unscored —
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comma…
-
Unscored —CVE-2000-0702 Public exploit
The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink atta…
-
Unscored —CVE-2000-0766 Public exploit
Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privile…
-
Unscored —CVE-2000-0873 Public exploit
netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network int…
-
Unscored —
Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arb…
-
Unscored —
The RightFax web client uses predictable session numbers, which allows remote attackers to hijack user sessions.
-
Unscored —
Check Point VPN-1/FireWall-1 4.1 and earlier allows remote attackers to bypass the directionality check via fragmented …
-
Unscored —CVE-2000-0912 Public exploit
MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specify…
-
Unscored —CVE-2000-0994 Public exploit
Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local user…
-
Unscored —CVE-2000-0921 Public exploit
Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read a…
-
Unscored —CVE-2000-0914 Public exploit
OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.
-
Unscored —
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in…
-
Unscored —CVE-2000-0970 EPSS 46%
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remo…
-
Unscored —
IMP 2.2 and earlier allows attackers to read and delete arbitrary files by modifying the attachment_name hidden form va…
-
Unscored —
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd for…