Skip to content
OpenAdvisories

Archive

12 September 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12393
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1894
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

393 results · Feed

  • Unscored —

    Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files,…

  • Unscored —
    CVE-1999-1508 Public exploit

    Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by d…

  • Unscored —
    CVE-1999-1219 Public exploit

    Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain ro…

  • Unscored —

    counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.

  • Unscored —

    NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it rep…

  • Unscored —

    Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of ser…

  • Unscored —

    Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.

  • Unscored —

    HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that co…

  • Unscored —
    CVE-1999-1291 EPSS 13%

    TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset co…

  • Unscored —

    Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, a…

  • Unscored —

    Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the con…

  • Unscored —

    SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to …

  • Unscored —

    SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, …

  • Unscored —
    CVE-1999-1499 Public exploit

    named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root k…

  • Unscored —

    Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2)…

  • Unscored —

    Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, whic…

  • Unscored —

    Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line ar…

  • Unscored —

    dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.lo…

  • Unscored —
    CVE-1999-1461 Public exploit

    inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttse…

  • Unscored —
    CVE-1999-1166 Public exploit

    Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by acc…

  • Unscored —

    runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allo…

  • Unscored —

    mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.

  • Unscored —

    Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.

  • Unscored —

    Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass…

  • Unscored —

    .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appen…

  • Unscored —

    ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the exist…

  • Unscored —

    Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "…

  • Unscored —

    Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remot…

  • Unscored —

    Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.

  • Unscored —

    Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system account…

  • Unscored —

    Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local use…

  • Unscored —

    Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute…

  • Unscored —

    Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, w…

  • Unscored —

    Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local u…

  • Unscored —

    Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.

  • Unscored —

    BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Se…

  • Unscored —

    Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.

  • Unscored —

    Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain pri…

  • Unscored —

    O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacter…

  • Unscored —

    The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut …