Archive
12 September 2001
Vulnerabilities first published on this day (UTC), newest first.
393 results · Feed
-
Unscored —
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose…
-
Unscored —
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell m…
-
Unscored —
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buff…
-
Unscored —
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sen…
-
Unscored —CVE-1999-1084 Public exploit
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specif…
-
Unscored —
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan hor…
-
Unscored —
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allow…
-
Unscored —
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the…
-
Unscored —
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows rem…
-
Unscored —
install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to chang…
-
Unscored —
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allo…
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the D…
-
Unscored —
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
-
Unscored —
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a…
-
Unscored —
The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the m…
-
Unscored —
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long d…
-
Unscored —
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters …
-
Unscored —
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in th…
-
Unscored —
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does …
-
Unscored —CVE-1999-1498 Public exploit
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the repl…
-
Unscored —
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie scri…
-
Unscored —
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command li…
-
Unscored —
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arb…
-
Unscored —
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an …
-
Unscored —
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_…
-
Unscored —
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfi…
-
Unscored —
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
-
Unscored —
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
-
Unscored —
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argu…
-
Unscored —
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which co…
-
Unscored —
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when ext…
-
Unscored —
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
-
Unscored —
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in c…
-
Unscored —
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user nam…
-
Unscored —
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
-
Unscored —
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions …
-
Unscored —
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argumen…
-
Unscored —
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
-
Unscored —
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allow…
-
Unscored —CVE-1999-1030 Public exploit
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (new…