Skip to content
OpenAdvisories

Archive

7 May 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7201
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2491
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

201 results · Feed

  • Unscored —

    Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.

  • Unscored —

    WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprinta…

  • Unscored —

    A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an…

  • Unscored —

    periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary …

  • Unscored —

    Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary…

  • Unscored —

    GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.

  • Unscored —

    GNU Groff uses the current working directory to find a device description file, which allows a local user to gain addit…

  • Unscored —
    CVE-2000-0622 Public exploit EPSS 13%

    Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execu…

  • Unscored —
    CVE-2000-0577 Public exploit

    Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) atta…

  • Unscored —

    CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the f…

  • Unscored —

    WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allow…

  • Unscored —

    Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot…

  • Unscored —

    The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via th…

  • Unscored —

    Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.

  • Unscored —

    Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command hist…

  • Unscored —
    CVE-2000-0816 Public exploit

    Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain sh…

  • Unscored —
    CVE-2000-0829 Public exploit

    The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a…

  • Unscored —

    The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.

  • Unscored —
    CVE-2000-0573 Public exploit EPSS 96%

    The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows rem…

  • Unscored —

    WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, whi…

  • Unscored —

    The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging in…

  • Unscored —
    CVE-2000-0306 Public exploit

    Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

  • Unscored —
    CVE-2000-0504 Public exploit

    libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properl…

  • Unscored —

    Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a deni…

  • Unscored —
    CVE-2000-0720 Public exploit

    news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, whic…

  • Unscored —

    The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifi…

  • Unscored —

    WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whi…

  • Unscored —
    CVE-2000-1121 Public exploit

    Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a l…

  • Unscored —

    WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody g…

  • Unscored —
    CVE-2000-1174 Public exploit

    Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2000-1180 Public exploit

    Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a…

  • Unscored —
    CVE-2000-1171 Public exploit

    Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary file…

  • Unscored —

    cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY…

  • Unscored —
    CVE-2000-1075 Public exploit

    Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote …

  • Unscored —

    Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands vi…

  • Unscored —

    Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.

  • Unscored —
    CVE-2000-1119 Public exploit

    Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a …

  • Unscored —
    CVE-2000-1124 Public exploit

    Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variable…

  • Unscored —

    Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message …

  • Unscored —

    Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a dire…