Skip to content
OpenAdvisories

Archive

12 September 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12393
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1894
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

393 results · Feed

  • Unscored —
    CVE-1999-1340 Public exploit

    Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

  • Unscored —

    Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.

  • Unscored —

    Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.

  • Unscored —

    Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to …

  • Unscored —

    Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.

  • Unscored —

    Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, an…

  • Unscored —

    Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.

  • Unscored —

    StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long US…

  • Unscored —
    CVE-1999-1521 Public exploit

    Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM comman…

  • Unscored —

    Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.

  • Unscored —

    Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local …

  • Unscored —

    Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain pr…

  • Unscored —

    Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could …

  • Unscored —

    SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum…

  • Unscored —

    HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the …

  • Unscored —
    CVE-1999-1241 EPSS 14%

    Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a ma…

  • Unscored —

    BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key…

  • Unscored —

    KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users …

  • Unscored —
    CVE-1999-1504 Public exploit

    Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.

  • Unscored —

    NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remo…

  • Unscored —

    Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary c…

  • Unscored —

    Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, whi…

  • Unscored —
    CVE-1999-1286 Public exploit

    addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a s…

  • Unscored —

    KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary…

  • Unscored —

    Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry ke…

  • Unscored —
    CVE-1999-1408 Public exploit

    Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a …

  • Unscored —

    Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-1999-1015 Public exploit

    Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a deni…

  • Unscored —

    ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server'…

  • Unscored —

    Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environme…

  • Unscored —
    CVE-1999-1069 Public exploit

    Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary fil…

  • Unscored —

    Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges…

  • Unscored —

    dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (…

  • Unscored —
    CVE-1999-1551 Public exploit EPSS 72%

    Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly exec…

  • Unscored —
    CVE-1999-1405 Public exploit

    snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove…

  • Unscored —

    FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature f…

  • Unscored —

    Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.

  • Unscored —

    Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on …

  • Unscored —

    Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From…

  • Unscored —

    netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable a…