Archive
January 2001
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22232
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
232 results · Feed
-
Unscored —CVE-2000-0858 EPSS 19%
Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a s…
-
Unscored —
The pluggable authentication module for mysql (pam_mysql) before 0.4.7 does not properly cleanse user input when constr…
-
Unscored —
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of …
-
Unscored —CVE-2000-0853 Public exploit
YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
-
Unscored —
Check Point VPN-1/FireWall-1 4.1 and earlier improperly retransmits encapsulated FWS packets, even if they do not come …
-
Unscored —CVE-2000-0672 EPSS 10%
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attacke…
-
Unscored —
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modi…
-
Unscored —
The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus …
-
Unscored —
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which …
-
Unscored —CVE-2000-0278 Public exploit
The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll adm…
-
Unscored —
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provide…
-
Unscored —CVE-2000-0991 Public exploit
Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute …
-
Unscored —
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary co…
-
Unscored —
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via s…
-
Unscored —
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the…
-
Unscored —
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a fil…
-
Unscored —
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name…
-
Unscored —CVE-2000-0920 Public exploit
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary file…
-
Unscored —CVE-2000-0989 Public exploit
Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2000-0992 Public exploit
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary fil…
-
Unscored —CVE-2000-0925 Public exploit
The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with w…
-
Unscored —CVE-2000-0908 Public exploit
BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long A…
-
Unscored —CVE-2000-0980 EPSS 13%
NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast a…
-
Unscored —
The Nbase-Xyplex EdgeBlaster router allows remote attackers to cause a denial of service via a scan for the FormMail CG…
-
Unscored —CVE-2000-0977 Public exploit
mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file…
-
Unscored —CVE-2000-0937 Public exploit
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but th…
-
Unscored —CVE-2000-0698 Public exploit
Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user vi…
-
Unscored —
The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet…
-
Unscored —
The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to…
-
Unscored —
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could …
-
Unscored —
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro …
-
Unscored —
Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.
-
Unscored —CVE-2000-0924 Public exploit
Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbit…
-
Unscored —
Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2000-0913 EPSS 36%
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is …
-
Unscored —
Buffer overflow in Getkey in the protocol checker in the inter-module communication mechanism in Check Point VPN-1/Fire…
-
Unscored —
The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to cap…
-
Unscored —
Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attack…
-
Unscored —
GnuPG (gpg) 1.0.3 does not properly check all signatures of a file containing multiple documents, which allows an attac…
-
Unscored —
cmd5checkpw 0.21 and earlier allows remote attackers to cause a denial of service via an "SMTP AUTH" command with an un…