Skip to content
OpenAdvisories

Archive

12 September 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12393
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1894
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

393 results · Feed

  • Unscored —

    WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily …

  • Unscored —

    Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by ent…

  • Unscored —

    Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.

  • Unscored —
    CVE-1999-1254 EPSS 13%

    Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from …

  • Unscored —
    CVE-1999-1234 EPSS 13%

    LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a ca…

  • Unscored —

    Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb…

  • Unscored —

    By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of ot…

  • Unscored —

    Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 1…

  • Unscored —

    Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of s…

  • Unscored —

    Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat …

  • Unscored —
    CVE-1999-1518 Public exploit

    Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service …

  • Unscored —

    ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple time…

  • Unscored —
    CVE-1999-1436 Public exploit

    Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell meta…

  • Unscored —

    Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows …

  • Unscored —
    CVE-1999-1041 Public exploit

    Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a l…

  • Unscored —

    Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain …

  • Unscored —

    mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, …

  • Unscored —

    Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow l…

  • Unscored —

    Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.

  • Unscored —

    SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /d…

  • Unscored —
    CVE-1999-1463 EPSS 17%

    Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) …

  • Unscored —

    Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain roo…

  • Unscored —

    Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xs…

  • Unscored —

    Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.

  • Unscored —

    Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.

  • Unscored —
    CVE-1999-1082 Public exploit

    Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a …

  • Unscored —

    nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote att…

  • Unscored —
    CVE-1999-1184 Public exploit

    Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.

  • Unscored —

    Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with …

  • Unscored —
    CVE-1999-1410 Public exploit

    addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a sy…

  • Unscored —

    rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence o…

  • Unscored —

    FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP O…

  • Unscored —

    Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could all…

  • Unscored —

    Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by e…

  • Unscored —

    Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.

  • Unscored —

    tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inp…

  • Unscored —

    Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the …

  • Unscored —
    CVE-1999-1164 EPSS 13%

    Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with t…

  • Unscored —

    NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the s…

  • Unscored —

    Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.