Archive
7 May 2001
Vulnerabilities first published on this day (UTC), newest first.
201 results · Feed
-
Unscored —
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allo…
-
Unscored —
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the em…
-
Unscored —CVE-2001-0083 EPSS 17%
Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connectio…
-
Unscored —CVE-2001-0295 Public exploit
Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly re…
-
Unscored —CVE-2001-0092 EPSS 12%
A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window,…
-
Unscored —
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
-
Unscored —
Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrar…
-
Unscored —CVE-2001-0006 Public exploit
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which all…
-
Unscored —CVE-2001-0028 Public exploit
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute …
-
Unscored —CVE-2001-0059 Public exploit
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2001-0040 Public exploit
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary p…
-
Unscored —
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed us…
-
Unscored —
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —
Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, a…
-
Unscored —CVE-1999-0115 Public exploit
AIX bugfiler program allows local users to gain root access.
-
Unscored —CVE-1999-0800 Public exploit
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
-
Unscored —CVE-1999-0945 EPSS 20%
Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a …
-
Unscored —
An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
-
Unscored —
Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
-
Unscored —
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appendin…
-
Unscored —
Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search r…
-
Unscored —
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm fi…
-
Unscored —
The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
-
Unscored —
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, al…
-
Unscored —CVE-1999-0268 Public exploit
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
-
Unscored —
Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain a…
-
Unscored —
traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packet…
-
Unscored —
Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
-
Unscored —CVE-2000-0693 Public exploit
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which a…
-
Unscored —
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
-
Unscored —
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAut…
-
Unscored —
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove softw…
-
Unscored —
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as…
-
Unscored —
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modif…
-
Unscored —
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of …
-
Unscored —
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of …
-
Unscored —CVE-2000-0742 EPSS 19%
The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by …
-
Unscored —
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename …
-
Unscored —
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWar…
-
Unscored —
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a l…