Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
107 results · Clear filters · Feed
-
Unscored —CVE-2001-0006 Public exploit
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which all…
-
Unscored —CVE-2001-0028 Public exploit
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute …
-
Unscored —CVE-2001-0059 Public exploit
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2001-0040 Public exploit
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary p…
-
Unscored —
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in th…
-
Unscored —CVE-1999-0115 Public exploit
AIX bugfiler program allows local users to gain root access.
-
Unscored —CVE-1999-0800 Public exploit
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
-
Unscored —
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, al…
-
Unscored —CVE-1999-0268 Public exploit
MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
-
Unscored —CVE-2000-0693 Public exploit
pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which a…
-
Unscored —
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as…
-
Unscored —
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename …
-
Unscored —
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execu…
-
Unscored —CVE-2000-0577 Public exploit
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) atta…
-
Unscored —CVE-2000-0816 Public exploit
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain sh…
-
Unscored —CVE-2000-0829 Public exploit
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a…
-
Unscored —
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows rem…
-
Unscored —CVE-2000-0306 Public exploit
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
-
Unscored —CVE-2000-0504 Public exploit
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properl…
-
Unscored —CVE-2000-0720 Public exploit
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, whic…
-
Unscored —CVE-2000-1121 Public exploit
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a l…
-
Unscored —CVE-2000-1174 Public exploit
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2000-1180 Public exploit
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a…
-
Unscored —CVE-2000-1171 Public exploit
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary file…
-
Unscored —CVE-2000-1075 Public exploit
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote …
-
Unscored —CVE-2000-1119 Public exploit
Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a …
-
Unscored —CVE-2000-1124 Public exploit
Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variable…