Archive
January 2001
Vulnerabilities first published in this month (UTC), newest first.
- 1
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
- 21
- 22232
- 23
- 24
- 25
- 26
- 27
- 28
- 29
- 30
- 31
232 results · Feed
-
Unscored —
Search engine in Ultraseek 3.1 and 3.1.10 (aka Inktomi Search) allows remote attackers to cause a denial of service via…
-
Unscored —
pollit.cgi in Poll It 2.01 and earlier uses data files that are located under the web document root, which allows remot…
-
Unscored —
The client authentication interface for Check Point Firewall-1 4.0 and earlier generates different error messages for i…
-
Unscored —CVE-2000-1006 EPSS 15%
Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remot…
-
Unscored —CVE-2000-1094 Public exploit
Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands vi…
-
Unscored —CVE-2000-1120 Public exploit
Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.
-
Unscored —
Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call i…
-
Unscored —
The installation of VolanoChatPro chat server sets world-readable permissions for its configuration file and stores the…
-
Unscored —
The default configuration of XFCE 3.5.1 bypasses the Xauthority access control mechanism with an "xhost + localhost" co…
-
Unscored —
Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that…
-
Unscored —CVE-2000-1074 Public exploit
csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could …
-
Unscored —
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" comm…
-
Unscored —CVE-2000-1069 Public exploit
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the r…
-
Unscored —CVE-2000-1022 Public exploit
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP command…
-
Unscored —
I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allo…
-
Unscored —
Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to ga…
-
Unscored —
add_2_basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form…
-
Unscored —CVE-2000-1132 Public exploit
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a ma…
-
Unscored —CVE-2000-1140 Public exploit
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that the…
-
Unscored —
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters…
-
Unscored —
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and …
-
Unscored —
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory,…
-
Unscored —
Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (emp…
-
Unscored —
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitra…
-
Unscored —CVE-2000-1016 Public exploit
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows…
-
Unscored —
Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed…
-
Unscored —
Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly …
-
Unscored —CVE-2000-1149 EPSS 16%
Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary comma…
-
Unscored —
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands …
-
Unscored —
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows loca…
-
Unscored —CVE-2000-1002 Public exploit
POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pa…
-
Unscored —
ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
-
Unscored —
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain r…
-
Unscored —
Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX con…
-
Unscored —
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows…
-
Unscored —
Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the pwd command, which all…
-
Unscored —
csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows loc…
-
Unscored —
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which al…
-
Unscored —
Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute ar…
-
Unscored —CVE-2000-1050 Public exploit
Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request…