Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q comman…
-
Unscored —
Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges b…
-
Unscored —
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to…
-
Unscored —
pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.
-
Unscored —
Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink atta…
-
Unscored —
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
-
Unscored —CVE-2001-0486 Public exploit
Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port…
-
Unscored —
Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibl…
-
Unscored —CVE-2001-0495 Public exploit
Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via …
-
Unscored —
BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN…
-
Unscored —CVE-2001-0245 EPSS 14%
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read ser…
-
Unscored —
Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request w…
-
Unscored —CVE-2001-0339 EPSS 15%
Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than th…
-
Unscored —
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a loca…
-
Unscored —
Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that i…
-
Unscored —
Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain …
-
Unscored —
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and…
-
Unscored —
Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a U…
-
Unscored —CVE-2001-0334 EPSS 15%
FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that ge…
-
Unscored —
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
-
Unscored —
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTT…
-
Unscored —
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to g…
-
Unscored —CVE-2001-0440 Public exploit
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and pos…
-
Unscored —
man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).
-
Unscored —
Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allow…
-
Unscored —
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
-
Unscored —
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain priv…
-
Unscored —CVE-2001-0383 Public exploit
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change…
-
Unscored —
Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a…
-
Unscored —
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encod…
-
Unscored —
Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbit…
-
Unscored —CVE-2001-0189 Public exploit
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a …
-
Unscored —
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institutio…
-
Unscored —
Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large …
-
Unscored —
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packe…
-
Unscored —
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, …
-
Unscored —
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host…
-
Unscored —
Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain…
-
Unscored —
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
-
Unscored —CVE-2001-0335 EPSS 21%
FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding …