Skip to content
OpenAdvisories

Archive

January 2001

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22232
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

232 results · Feed

  • Unscored —

    OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH se…

  • Unscored —

    shred 1.0 file wiping utility does not properly open a file for overwriting or flush its buffers, which prevents shred …

  • Unscored —

    Buffer overflow in remote web administration component (webprox.dll) of 602Pro LAN SUITE before 2000.0.1.33 allows remo…

  • Unscored —

    Format string vulnerability in ypbind-mt in SuSE SuSE-6.2, and possibly other Linux operating systems, allows an attack…

  • Unscored —
    CVE-2000-1034 EPSS 27%

    Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary comm…

  • Unscored —
    CVE-2000-1036 Public exploit

    Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information vi…

  • Unscored —
    CVE-2000-1095 Public exploit

    modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell met…

  • Unscored —

    Trend Micro InterScan VirusWall creates an "Intscan" share to the "InterScan" directory with permissions that grant Ful…

  • Unscored —

    fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack.

  • Unscored —

    The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could all…

  • Unscored —
    CVE-2000-1144 Public exploit

    Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the res…

  • Unscored —

    Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration f…

  • Unscored —

    telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2000-1181 Public exploit

    Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, poss…

  • Unscored —
    CVE-2000-1058 Public exploit EPSS 16%

    Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attack…

  • Unscored —

    pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_op…

  • Unscored —

    Buffer overflow in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, allows an atta…

  • Unscored —

    Format string vulnerability in AOL Instant Messenger (AIM) 4.1.2010 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2000-1089 Public exploit EPSS 75%

    Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book S…

  • Unscored —

    Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.

  • Unscored —

    WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number …

  • Unscored —
    CVE-2000-1003 EPSS 13%

    NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sh…

  • Unscored —

    Format string vulnerability in ypserv in Mandrake Linux 7.1 and earlier, and possibly other Linux operating systems, al…

  • Unscored —
    CVE-2000-1072 Public exploit

    iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal conf…

  • Unscored —

    Buffer overflow in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and p…

  • Unscored —

    elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwri…

  • Unscored —
    CVE-2000-1096 Public exploit

    crontab by Paul Vixie uses predictable file names for a temporary file and does not properly ensure that the file is ow…

  • Unscored —

    GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack.

  • Unscored —

    Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary cod…

  • Unscored —
    CVE-2000-1027 Public exploit

    Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flo…

  • Unscored —
    CVE-2000-1005 Public exploit

    Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remo…

  • Unscored —

    Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SS…