Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario comp…
-
Unscored —
Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version…
-
Unscored —
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of …
-
Unscored —
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a d…
-
Unscored —
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, vi…
-
Unscored —
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exha…
-
Unscored —CVE-2001-0004 EPSS 28%
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.h…
-
Unscored —
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attac…
-
Unscored —
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to termina…
-
Unscored —
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denia…
-
Unscored —CVE-2001-0244 EPSS 15%
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search p…
-
Unscored —
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges vi…
-
Unscored —
FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number…
-
Unscored —
The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of se…
-
Unscored —
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers t…
-
Unscored —CVE-2001-0462 Public exploit
Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files vi…
-
Unscored —
Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) b…
-
Unscored —
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of s…
-
Unscored —CVE-2001-0467 Public exploit
Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary…
-
Unscored —CVE-2001-0215 Public exploit
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form paramet…
-
Unscored —CVE-2001-0237 EPSS 18%
Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly conn…
-
Unscored —
Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
-
Unscored —
Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command th…
-
Unscored —CVE-2001-0243 EPSS 18%
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename i…
-
Unscored —CVE-2001-0402 Public exploit
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers…
-
Unscored —
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary comman…
-
Unscored —
Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL…
-
Unscored —
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration…
-
Unscored —CVE-2001-0238 EPSS 15%
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass…
-
Unscored —
ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FT…
-
Unscored —
rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a …
-
Unscored —CVE-2001-0095 Public exploit
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temp…
-
Unscored —
ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system cras…
-
Unscored —
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensit…
-
Unscored —
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer all…
-
Unscored —CVE-2001-0347 EPSS 14%
Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the …
-
Unscored —
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial …
-
Unscored —
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Te…
-
Unscored —CVE-2001-0409 Public exploit
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and sw…
-
Unscored —
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.