Skip to content
OpenAdvisories

Archive

12 September 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12393
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1894
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

393 results · Feed

  • Unscored —
    CVE-2001-0711 Public exploit

    Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Loc…

  • Unscored —
    CVE-2001-0679 Public exploit EPSS 16%

    A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a l…

  • Unscored —
    CVE-2001-0647 Public exploit

    Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET reques…

  • Unscored —
    CVE-1999-0926 Public exploit

    Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.

  • Unscored —

    Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial…

  • Unscored —

    Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" comm…

  • Unscored —
    CVE-1999-0154 Public exploit EPSS 40%

    IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the …

  • Unscored —

    Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to b…

  • Unscored —
    CVE-1999-1467 EPSS 10%

    Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, p…

  • Unscored —

    (1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing …

  • Unscored —

    sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are wr…

  • Unscored —

    The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, whi…

  • Unscored —

    Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which cou…

  • Unscored —

    Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by …

  • Unscored —
    CVE-1999-1170 Public exploit

    IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" …

  • Unscored —

    mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database nam…

  • Unscored —

    The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the…

  • Unscored —

    Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log messag…

  • Unscored —

    Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2…

  • Unscored —
    CVE-1999-1130 Public exploit

    Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows rem…

  • Unscored —
    CVE-1999-1371 Public exploit

    Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the t…

  • Unscored —

    HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other port…

  • Unscored —
    CVE-1999-1441 Public exploit

    Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local user…

  • Unscored —

    Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows …

  • Unscored —
    CVE-1999-1447 EPSS 13%

    Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long C…

  • Unscored —

    iPass RoamServer 3.1 creates temporary files with world-writable permissions.

  • Unscored —
    CVE-1999-1539 Public exploit EPSS 12%

    Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attac…

  • Unscored —

    WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disable…

  • Unscored —

    LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recip…

  • Unscored —
    CVE-1999-1519 Public exploit

    Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user…

  • Unscored —
    CVE-1999-1553 Public exploit

    Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a lon…

  • Unscored —
    CVE-1999-1399 Public exploit

    spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME …

  • Unscored —
    CVE-1999-1479 Public exploit EPSS 12%

    The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.

  • Unscored —
    CVE-1999-1171 Public exploit

    IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags"…

  • Unscored —

    ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user lo…

  • Unscored —

    Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1…

  • Unscored —

    AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder …

  • Unscored —
    CVE-1999-1532 Public exploit

    Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion)…

  • Unscored —
    CVE-1999-1016 Public exploit

    Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudo…

  • Unscored —

    Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with …