Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privile…
-
Unscored —
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrar…
-
Unscored —
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or e…
-
Unscored —
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start…
-
Unscored —CVE-2000-0569 Public exploit
Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its inter…
-
Unscored —
libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to …
-
Unscored —CVE-2000-0243 Public exploit
AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request …
-
Unscored —
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in t…
-
Unscored —CVE-2000-0799 Public exploit
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on t…
-
Unscored —
Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a…
-
Unscored —CVE-2000-0897 Public exploit
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL …
-
Unscored —
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands wit…
-
Unscored —
Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows r…
-
Unscored —
Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service …
-
Unscored —CVE-2001-0711 Public exploit
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Loc…
-
Unscored —
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a l…
-
Unscored —CVE-2001-0647 Public exploit
Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET reques…
-
Unscored —CVE-1999-0926 Public exploit
Apache allows remote attackers to conduct a denial of service via a large number of MIME headers.
-
Unscored —
Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial…
-
Unscored —
Denial of service in SMTP applications such as Sendmail, when a remote attacker (e.g. spammer) uses many "RCPT TO" comm…
-
Unscored —
IIS 2.0 and 3.0 allows remote attackers to read the source code for ASP pages by appending a . (dot) to the end of the …
-
Unscored —
Vulnerability in Cisco IOS 11.1 through 11.3 with distributed fast switching (DFS) enabled allows remote attackers to b…
-
Unscored —CVE-1999-1467 EPSS 10%
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, p…
-
Unscored —
(1) ipxchk and (2) ipxlink in SGI OS2 IRIX 6.3 does not properly clear the IFS environmental variable before executing …
-
Unscored —
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are wr…
-
Unscored —
The installation of 1ArcServe Backup and Inoculan AV client modules for Exchange create a log file, exchverify.log, whi…
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which cou…
-
Unscored —
Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by …
-
Unscored —CVE-1999-1170 Public exploit
IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" …
-
Unscored —
mSQL (Mini SQL) 2.0.6 allows remote attackers to obtain sensitive server information such as logged users, database nam…
-
Unscored —
The default configuration of Slackware 3.4, and possibly other versions, includes . (dot, the current directory) in the…
-
Unscored —
Buffer overflow in cddbd CD database server allows remote attackers to execute arbitrary commands via a long log messag…
-
Unscored —
Nosque MsgCore 2.14 stores passwords in cleartext: (1) the administrator password in the AdmPasswd registry key, and (2…
-
Unscored —CVE-1999-1130 Public exploit
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows rem…
-
Unscored —CVE-1999-1371 Public exploit
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the t…
-
Unscored —
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other port…
-
Unscored —CVE-1999-1441 Public exploit
Linux 2.0.34 does not properly prevent users from sending SIGIO signals to arbitrary processes, which allows local user…
-
Unscored —
Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows …
-
Unscored —CVE-1999-1447 EPSS 13%
Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long C…
-
Unscored —
iPass RoamServer 3.1 creates temporary files with world-writable permissions.