Archive
12 September 2001
Vulnerabilities first published on this day (UTC), newest first.
393 results · Feed
-
Unscored —
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encry…
-
Unscored —
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed pack…
-
Unscored —
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which al…
-
Unscored —
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of…
-
Unscored —
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command lin…
-
Unscored —
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root…
-
Unscored —
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for…
-
Unscored —
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
-
Unscored —CVE-1999-1052 EPSS 14%
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable an…
-
Unscored —
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaust…
-
Unscored —
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via …
-
Unscored —
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allo…
-
Unscored —CVE-1999-1431 Public exploit
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 ap…
-
Unscored —
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) …
-
Unscored —
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which all…
-
Unscored —
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via th…
-
Unscored —CVE-1999-1451 EPSS 18%
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
-
Unscored —
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite …
-
Unscored —
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the reci…
-
Unscored —
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the we…
-
Unscored —
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise di…
-
Unscored —
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restr…
-
Unscored —CVE-1999-1390 Public exploit
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program…
-
Unscored —
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, whic…
-
Unscored —
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to b…
-
Unscored —
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly …
-
Unscored —CVE-1999-1460 Public exploit
BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying …
-
Unscored —CVE-1999-1112 Public exploit
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after …
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, …
-
Unscored —CVE-1999-1081 Public exploit
Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
-
Unscored —
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
-
Unscored —
NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via…
-
Unscored —
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in th…
-
Unscored —CVE-1999-1497 Public exploit
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to re…
-
Unscored —
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to b…
-
Unscored —
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE…
-
Unscored —
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
-
Unscored —
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a deni…
-
Unscored —
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argu…
-
Unscored —
Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is…