Archive
February 2001
Vulnerabilities first published in this month (UTC), newest first.
61 results · Feed
-
Unscored —
The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writea…
-
Unscored —
Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of …
-
Unscored —
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight M…
-
Unscored —
Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without…
-
Unscored —
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, …
-
Unscored —CVE-2001-0112 Public exploit
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
-
Unscored —CVE-2001-0114 Public exploit
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
-
Unscored —
The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow r…
-
Unscored —
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to…
-
Unscored —
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink…
-
Unscored —
ptylogin in Unix systems allows users to perform a denial of service by locking out modems, dial out with that modem, o…
-
Unscored —
Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.
-
Unscored —
Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of servic…
-
Unscored —CVE-1999-0757 Public exploit
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the tem…
-
Unscored —
Novell NetWare Transaction Tracking System (TTS) in Novell 4.11 and earlier allows remote attackers to cause a denial o…
-
Unscored —
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is pass…
-
Unscored —
Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary com…
-
Unscored —CVE-2001-0075 Public exploit
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2001-0097 Public exploit
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2001-0037 Public exploit
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL c…
-
Unscored —
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary comman…
-
Unscored —CVE-2001-0032 Public exploit
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain …
-
Unscored —CVE-2001-0074 Public exploit
Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2001-0084 Public exploit
GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could al…
-
Unscored —CVE-2001-0082 Public exploit
Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via ma…
-
Unscored —CVE-2001-0087 Public exploit
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which…
-
Unscored —
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users with…
-
Unscored —CVE-2001-0052 Public exploit
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.
-
Unscored —
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Servi…
-
Unscored —
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and poss…
-
Unscored —
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2001-0029 Public exploit
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitra…
-
Unscored —CVE-2001-0049 Public exploit
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of G…
-
Unscored —
Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service v…
-
Unscored —CVE-2001-0051 Public exploit
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote at…
-
Unscored —
MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel bu…
-
Unscored —
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long …
-
Unscored —
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on t…
-
Unscored —
BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting …