Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —CVE-1999-1460 Public exploit
BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying …
-
Unscored —CVE-1999-1112 Public exploit
Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after …
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, …
-
Unscored —CVE-1999-1081 Public exploit
Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files.
-
Unscored —
Delegate proxy 5.9.3 and earlier creates files and directories in the DGROOT with world-writable permissions.
-
Unscored —
NFS daemon (nfsd.exe) for Omni-NFS/X 6.1 allows remote attackers to cause a denial of service (resource exhaustion) via…
-
Unscored —
E-mail client in Softarc FirstClass Internet Server 5.506 and earlier stores usernames and passwords in cleartext in th…
-
Unscored —CVE-1999-1497 Public exploit
Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to re…
-
Unscored —
Vulnerability in Cisco IOS 11.1CC and 11.1CT with distributed fast switching (DFS) enabled allows remote attackers to b…
-
Unscored —
Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE…
-
Unscored —
Buffer overflows in CDROM Confidence Test program (cdrom) allow local users to gain root privileges.
-
Unscored —
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a deni…
-
Unscored —
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argu…
-
Unscored —
Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is…
-
Unscored —CVE-1999-1026 Public exploit
aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on…
-
Unscored —
Lotus cc:Mail release 8 stores the postoffice password in plaintext in a hidden file which has insecure permissions, wh…
-
Unscored —
Vulnerability in NeXT 1.0a and 1.0 with publicly accessible printers allows local users to gain privileges via a combin…
-
Unscored —
Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
-
Unscored —CVE-1999-1018 Public exploit
IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, w…
-
Unscored —
Vulnerability in urestore in Novell UnixWare 1.1 allows local users to gain root privileges.
-
Unscored —CVE-1999-1533 Public exploit
Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password a…
-
Unscored —
inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently list…
-
Unscored —
vacm ucd-snmp SNMP server, version 3.52, does not properly disable access to the public community string, which could a…
-
Unscored —
Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privilege…
-
Unscored —CVE-1999-1534 Public exploit
Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root a…
-
Unscored —
When IIS 2 or 3 is upgraded to IIS 4, ism.dll is inadvertently left in /scripts/iisadmin, which does not restrict acces…
-
Unscored —
Network Flight Recorder (NFR) 1.5 and 1.6 allows remote attackers to cause a denial of service in nfrd (crash) via a TC…
-
Unscored —
Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's …
-
Unscored —
Vulnerability in KDE konsole allows local users to hijack or observe sessions of other users by accessing certain devic…
-
Unscored —
Vulnerability in chsh command in HP-UX 9.X through 10.20 allows local users to gain privileges.
-
Unscored —
Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functi…
-
Unscored —
Transarc DCE Distributed File System (DFS) 1.1 for Solaris 2.4 and 2.5 does not properly initialize the grouplist for u…
-
Unscored —
ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to…
-
Unscored —
Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly othe…
-
Unscored —CVE-1999-1022 Public exploit
serial_ports administrative program in IRIX 4.x and 5.x trusts the user's PATH environmental variable to find and execu…
-
Unscored —CVE-1999-1113 Public exploit
Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to caus…
-
Unscored —
Format string vulnerability in AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of …
-
Unscored —CVE-1999-1158 Public exploit
Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.…
-
Unscored —CVE-1999-1387 EPSS 21%
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packe…
-
Unscored —
POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with pred…