Skip to content
OpenAdvisories

Archive

January 2001

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22232
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

232 results · Feed

  • Unscored —
    CVE-2000-0679 Public exploit

    The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client…

  • Unscored —

    The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in …

  • Unscored —

    WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.

  • Unscored —
    CVE-2000-0849 EPSS 15%

    Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Me…

  • Unscored —

    WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user c…

  • Unscored —

    Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.

  • Unscored —
    CVE-2000-0984 Public exploit

    The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a…

  • Unscored —

    The default installation of eTrust Access Control (formerly SeOS) uses a default encryption key, which allows remote at…

  • Unscored —

    The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden fo…

  • Unscored —
    CVE-2000-0864 Public exploit

    Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change…

  • Unscored —

    Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary command…

  • Unscored —

    Buffer overflow in University of Washington c-client library (used by pine and other programs) allows remote attackers …

  • Unscored —

    Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink …

  • Unscored —

    The seed generation mechanism in the inter-module S/Key authentication mechanism in Check Point VPN-1/FireWall-1 4.1 an…

  • Unscored —
    CVE-2000-0865 Public exploit

    Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long ter…

  • Unscored —

    GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack.

  • Unscored —
    CVE-2000-0942 Public exploit EPSS 22%

    The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross …

  • Unscored —
    CVE-2000-0341 Public exploit

    ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.

  • Unscored —
    CVE-2000-0926 Public exploit

    SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing th…

  • Unscored —

    Auction Weaver 1.0 through 1.04 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the userna…

  • Unscored —

    AIX techlibss allows local users to overwrite files via a symlink attack.

  • Unscored —

    Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary comman…

  • Unscored —
    CVE-2000-0929 Public exploit EPSS 14%

    Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embe…

  • Unscored —

    Auction Weaver 1.0 through 1.04 does not properly validate the names of form fields, which allows remote attackers to d…

  • Unscored —
    CVE-2000-0851 Public exploit

    Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long …

  • Unscored —

    eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote …

  • Unscored —
    CVE-2000-1026 Public exploit

    Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

  • Unscored —

    The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username…

  • Unscored —
    CVE-2000-1054 Public exploit

    Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denia…

  • Unscored —

    The default configuration of the Xsession file in Mandrake Linux 7.1 and 7.0 bypasses the Xauthority access control mec…

  • Unscored —

    nss_ldap earlier than 121, when run with nscd (name service caching daemon), allows remote attackers to cause a denial …

  • Unscored —

    Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to d…

  • Unscored —
    CVE-2000-1014 Public exploit EPSS 12%

    Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attacke…

  • Unscored —

    Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash or fsdb to read /dev/m…

  • Unscored —

    in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long reques…

  • Unscored —

    CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to bypass LDAP authentication on the server if the LD…

  • Unscored —

    Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a lon…

  • Unscored —

    Buffer overflow in ypbind 3.3 possibly allows an attacker to gain root privileges.

  • Unscored —

    The web administration interface for IBM AS/400 Firewall allows remote attackers to cause a denial of service via an em…

  • Unscored —

    Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands that navigate into and ou…