Archive
12 September 2001
Vulnerabilities first published on this day (UTC), newest first.
393 results · Feed
-
Unscored —
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when …
-
Unscored —
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute ar…
-
Unscored —
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local use…
-
Unscored —
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permi…
-
Unscored —
Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly exe…
-
Unscored —
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local…
-
Unscored —
(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
-
Unscored —
FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number ac…
-
Unscored —
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allow…
-
Unscored —
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which…
-
Unscored —CVE-1999-1515 Public exploit
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages wit…
-
Unscored —
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can…
-
Unscored —
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache …
-
Unscored —CVE-1999-1485 Public exploit
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files a…
-
Unscored —CVE-1999-1509 Public exploit
Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file …
-
Unscored —
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly …
-
Unscored —
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote a…
-
Unscored —
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when …
-
Unscored —
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
-
Unscored —CVE-1999-1544 EPSS 14%
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denia…
-
Unscored —
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status infor…
-
Unscored —CVE-1999-1050 Public exploit
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files…
-
Unscored —
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in…
-
Unscored —
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
-
Unscored —
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
-
Unscored —
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.
-
Unscored —
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and Red…
-
Unscored —
Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting…
-
Unscored —
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system o…
-
Unscored —CVE-1999-1083 Public exploit
Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a …
-
Unscored —
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to rea…
-
Unscored —
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by for…
-
Unscored —
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadeci…
-
Unscored —
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attemp…
-
Unscored —
Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with p…
-
Unscored —
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the pro…
-
Unscored —
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows loca…
-
Unscored —
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privilege…
-
Unscored —
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, wh…
-
Unscored —
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and refer…