Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
rxvt, when compiled with the PRINT_PIPE option in various Linux operating systems including Linux Slackware 3.0 and Red…
-
Unscored —
Seattle Labs Emurl 2.0, and possibly earlier versions, stores e-mail attachments in a specific directory with scripting…
-
Unscored —
The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system o…
-
Unscored —CVE-1999-1083 Public exploit
Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a …
-
Unscored —
dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to rea…
-
Unscored —
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by for…
-
Unscored —
Squid Internet Object Cache 1.1.20 allows users to bypass access control lists (ACLs) by encoding the URL with hexadeci…
-
Unscored —
Sudo 1.5 in Debian Linux 2.1 and Red Hat 6.0 allows local users to determine the existence of arbitrary files by attemp…
-
Unscored —
Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with p…
-
Unscored —
Idle locking function in MacOS 9 allows local attackers to bypass the password protection of idled sessions via the pro…
-
Unscored —
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows loca…
-
Unscored —
Vulnerability in CORE-DIAG fileset in HP message catalog in HP-UX 9.05 and earlier allows local users to gain privilege…
-
Unscored —
Xylan OmniSwitch before 3.2.6 allows remote attackers to bypass the login prompt via a CTRL-D (control d) character, wh…
-
Unscored —
Vulnerability in htmlparse.pike in Roxen Web Server 1.3.11 and earlier, possibly related to recursive parsing and refer…
-
Unscored —
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encry…
-
Unscored —
Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed pack…
-
Unscored —
rsh daemon (rshd) generates different error messages when a valid username is provided versus an invalid name, which al…
-
Unscored —
ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of…
-
Unscored —
Buffer overflow in chfn command in HP-UX 9.X through 10.20 allows local users to gain privileges via a long command lin…
-
Unscored —
Vulnerabilities in (1) ipxchk and (2) ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root…
-
Unscored —
Sambar Server 4.1 beta allows remote attackers to obtain sensitive information about the server via an HTTP request for…
-
Unscored —
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file.
-
Unscored —CVE-1999-1052 EPSS 14%
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable an…
-
Unscored —
IBM/Tivoli OPC Tracker Agent version 2 release 1 allows remote attackers to cause a denial of service (resource exhaust…
-
Unscored —
named-xfer in AIX 4.1.5 and 4.2.1 allows members of the system group to overwrite system files to gain root access via …
-
Unscored —
dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allo…
-
Unscored —CVE-1999-1431 Public exploit
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 ap…
-
Unscored —
PIM software for Royal daVinci does not properly password-protext access to data stored in the .mdb (Microsoft Access) …
-
Unscored —
Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which all…
-
Unscored —
Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via th…
-
Unscored —CVE-1999-1451 EPSS 18%
The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.
-
Unscored —
rcp on various Linux systems including Red Hat 4.0 allows a "nobody" user or other user with UID of 65535 to overwrite …
-
Unscored —
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the reci…
-
Unscored —
perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the we…
-
Unscored —
Majordomo 1.94.3 and earlier allows remote attackers to execute arbitrary commands when the advertise or noadvertise di…
-
Unscored —
PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restr…
-
Unscored —CVE-1999-1390 Public exploit
suidexec in suidmanager 0.18 on Debian 2.0 allows local users to gain root privileges by specifying a malicious program…
-
Unscored —
Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, whic…
-
Unscored —
Control Panel "Password Security" option for Apple Powerbooks allows attackers with physical access to the machine to b…
-
Unscored —
Multiple buffer overflows in WindowMaker 0.52 through 0.60.0 allow attackers to cause a denial of service and possibly …