Archive
12 September 2001
Vulnerabilities first published on this day (UTC), newest first.
393 results · Feed
-
Unscored —CVE-1999-1489 Public exploit
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privi…
-
Unscored —
Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identif…
-
Unscored —
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
-
Unscored —
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files …
-
Unscored —
A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may…
-
Unscored —
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users…
-
Unscored —
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precach…
-
Unscored —
Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users …
-
Unscored —
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
-
Unscored —
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which all…
-
Unscored —
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute a…
-
Unscored —CVE-1999-1555 Public exploit
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FU…
-
Unscored —
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash…
-
Unscored —
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the …
-
Unscored —
shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decry…
-
Unscored —
Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra /…
-
Unscored —CVE-1999-1235 Public exploit
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local…
-
Unscored —
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
-
Unscored —CVE-1999-1123 Public exploit
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) m…
-
Unscored —
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mai…
-
Unscored —CVE-1999-1434 Public exploit
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, whic…
-
Unscored —
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web…
-
Unscored —
Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a…
-
Unscored —CVE-1999-1543 Public exploit
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
-
Unscored —
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting th…
-
Unscored —CVE-1999-1398 Public exploit
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly…
-
Unscored —
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to acc…
-
Unscored —
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensiti…
-
Unscored —
ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication r…
-
Unscored —CVE-1999-1557 Public exploit
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers…
-
Unscored —CVE-1999-1043 EPSS 13%
Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whi…
-
Unscored —
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and…
-
Unscored —
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary…
-
Unscored —CVE-1999-1413 Public exploit
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the s…
-
Unscored —
Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execu…
-
Unscored —
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems…
-
Unscored —CVE-1999-1185 Public exploit
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscr…
-
Unscored —
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to d…
-
Unscored —
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PH…
-
Unscored —
Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the …