12 September 2001

393 results · Feed

• Unscored —
  CVE-1999-1026 Public exploit

  aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on…

  Sep 12, 2001
• Unscored —
  CVE-1999-1275

  Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, wh…

  Sep 12, 2001
• Unscored —
  CVE-1999-1391

  Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combin…

  Sep 12, 2001
• Unscored —
  CVE-1999-1302

  Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.

  Sep 12, 2001
• Unscored —
  CVE-1999-1018 Public exploit

  IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, w…

  Sep 12, 2001
• Unscored —
  CVE-1999-1307

  Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.

  Sep 12, 2001
• Unscored —
  CVE-1999-1533 Public exploit

  Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password a…

  Sep 12, 2001
• Unscored —
  CVE-1999-1075

  inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently list…

  Sep 12, 2001
• Unscored —
  CVE-1999-1245

  vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could a…

  Sep 12, 2001
• Unscored —
  CVE-1999-1182

  Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privilege…

  Sep 12, 2001
• Unscored —
  CVE-1999-1534 Public exploit

  Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root a…

  Sep 12, 2001
• Unscored —
  CVE-1999-1538 Public exploit EPSS 25%

  When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict acces…

  Sep 12, 2001
• Unscored —
  CVE-1999-1503

  Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TC…

  Sep 12, 2001
• Unscored —
  CVE-1999-1038

  Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's …

  Sep 12, 2001
• Unscored —
  CVE-1999-1268

  Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devic…

  Sep 12, 2001
• Unscored —
  CVE-1999-1088

  Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.

  Sep 12, 2001
• Unscored —
  CVE-1999-1364

  Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functi…

  Sep 12, 2001
• Unscored —
  CVE-1999-1295

  Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for u…

  Sep 12, 2001
• Unscored —
  CVE-1999-1475

  ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to…

  Sep 12, 2001
• Unscored —
  CVE-1999-1237

  Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly othe…

  apache2 Wolfi
  Sep 12, 2001
• Unscored —
  CVE-1999-1022 Public exploit

  serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execu…

  Sep 12, 2001
• Unscored —
  CVE-1999-1113 Public exploit

  Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to caus…

  Sep 12, 2001
• Unscored —
  CVE-1999-1417

  Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of …

  Sep 12, 2001
• Unscored —
  CVE-1999-1158 Public exploit

  Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.…

  Sep 12, 2001
• Unscored —
  CVE-1999-1387 EPSS 21%

  Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packe…

  Sep 12, 2001
• Unscored —
  CVE-2000-1197

  POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with pred…

  Sep 12, 2001
• Unscored —
  CVE-2000-1201

  Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 2…

  Sep 12, 2001
• Unscored —
  CVE-2000-1192

  Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possib…

  Sep 12, 2001
• Unscored —
  CVE-2000-1202

  ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories b…

  Sep 12, 2001
• Unscored —
  CVE-2000-1194

  Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, …

  Sep 12, 2001
• Unscored —
  CVE-2000-1191

  htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of…

  Sep 12, 2001
• Unscored —
  CVE-2000-1198 Public exploit

  qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for…

  Sep 12, 2001
• Unscored —
  CVE-2000-1199 Public exploit

  PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with suf…

  Sep 12, 2001