Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
292 results · Feed
-
Unscored —
pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
-
Unscored —
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAut…
-
Unscored —
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove softw…
-
Unscored —
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as…
-
Unscored —
The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modif…
-
Unscored —
IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of …
-
Unscored —
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of …
-
Unscored —CVE-2000-0742 EPSS 19%
The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by …
-
Unscored —
Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename …
-
Unscored —
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWar…
-
Unscored —
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a l…
-
Unscored —
Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
-
Unscored —
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprinta…
-
Unscored —
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an…
-
Unscored —
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary …
-
Unscored —
Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary…
-
Unscored —
GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
-
Unscored —
GNU Groff uses the current working directory to find a device description file, which allows a local user to gain addit…
-
Unscored —
Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execu…
-
Unscored —CVE-2000-0577 Public exploit
Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) atta…
-
Unscored —
CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the f…
-
Unscored —
WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allow…
-
Unscored —
Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot…
-
Unscored —
The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via th…
-
Unscored —
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
-
Unscored —
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command hist…
-
Unscored —CVE-2000-0816 Public exploit
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain sh…
-
Unscored —CVE-2000-0829 Public exploit
The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a…
-
Unscored —
The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
-
Unscored —
The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows rem…
-
Unscored —
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, whi…
-
Unscored —
The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging in…
-
Unscored —CVE-2000-0306 Public exploit
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
-
Unscored —CVE-2000-0504 Public exploit
libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properl…
-
Unscored —
Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a deni…
-
Unscored —CVE-2000-0720 Public exploit
news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, whic…
-
Unscored —
The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifi…
-
Unscored —
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, whi…
-
Unscored —CVE-2000-1121 Public exploit
Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a l…
-
Unscored —
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody g…