Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of servi…
-
Unscored —CVE-1999-1015 Public exploit
Buffer overflow in Apple AppleShare Mail Server 5.0.3 on MacOS 8.1 and earlier allows a remote attacker to cause a deni…
-
Unscored —
ICQ ActiveList Server allows remote attackers to cause a denial of service (crash) via malformed packets to the server'…
-
Unscored —
Buffer overflow in libsocks5 library of Socks 5 (socks5) 1.0r5 allows local users to gain privileges via long environme…
-
Unscored —CVE-1999-1069 Public exploit
Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary fil…
-
Unscored —
Buffer overflow in Kerberos IV compatibility libraries as used in Kerberos V allows local users to gain root privileges…
-
Unscored —
dumpreg in Red Hat Linux 5.1 opens /dev/mem with O_RDWR access, which allows local users to cause a denial of service (…
-
Unscored —
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly exec…
-
Unscored —CVE-1999-1405 Public exploit
snap command in AIX before 4.3.2 creates the /tmp/ibmsupt directory with world-readable permissions and does not remove…
-
Unscored —
FlowPoint DSL router firmware versions prior to 3.0.8 allows a remote attacker to exploit a password recovery feature f…
-
Unscored —
Vulnerability in restore0.9 installation script in NeXT 1.0a and 1.0 allows local users to gain root privileges.
-
Unscored —
Vulnerability in digest in AIX 4.3 allows printq users to gain root privileges by creating and/or modifing any file on …
-
Unscored —
Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From…
-
Unscored —
netstation.navio-com.rte 1.1.0.1 configuration script for Navio NC on IBM AIX exports /tmp over NFS as world-readable a…
-
Unscored —
Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when …
-
Unscored —
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute ar…
-
Unscored —
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local use…
-
Unscored —
IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permi…
-
Unscored —
Buffer overflow in Tetrix TetriNet daemon 1.13.16 allows remote attackers to cause a denial of service and possibly exe…
-
Unscored —
ARCAD Systemhaus 0.078-5 installs critical programs and files with world-writeable permissions, which could allow local…
-
Unscored —
(1) acledit and (2) aclput in AIX 4.3 allow local users to create or modify files via a symlink attack.
-
Unscored —
FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number ac…
-
Unscored —
Livingston Portmaster routers running ComOS use the same initial sequence number (ISN) for TCP connections, which allow…
-
Unscored —
Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which…
-
Unscored —CVE-1999-1515 Public exploit
A non-default configuration in TenFour TFS Gateway 4.0 allows an attacker to cause a denial of service via messages wit…
-
Unscored —
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can…
-
Unscored —
Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache …
-
Unscored —CVE-1999-1485 Public exploit
nsd in IRIX 6.5 through 6.5.2 exports a virtual filesystem on a UDP port, which allows remote attackers to view files a…
-
Unscored —CVE-1999-1509 Public exploit
Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file …
-
Unscored —
Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly …
-
Unscored —
Quake 1 server responds to an initial UDP game connection request with a large amount of traffic, which allows remote a…
-
Unscored —
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when …
-
Unscored —
Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file.
-
Unscored —CVE-1999-1544 EPSS 14%
Buffer overflow in FTP server in Microsoft IIS 3.0 and 4.0 allows local and sometimes remote attackers to cause a denia…
-
Unscored —
SGI MachineInfo CGI program, installed by default on some web servers, prints potentially sensitive system status infor…
-
Unscored —CVE-1999-1050 Public exploit
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files…
-
Unscored —
gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in…
-
Unscored —
BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
-
Unscored —
nobo 1.2 allows remote attackers to cause a denial of service (crash) via a series of large UDP packets.
-
Unscored —
Manual page reader (man) in FreeBSD 2.2 and earlier allows local users to gain privileges via a sequence of commands.