Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Buffer overflow in FTP server in QPC Software's QVT/Term Plus versions 4.2d and 4.3 and QVT/Net 4.3 allows remote attac…
-
Unscored —
WebRamp M3 router does not disable remote telnet or HTTP access to itself, even when access has been explicitly disable…
-
Unscored —
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recip…
-
Unscored —CVE-1999-1519 Public exploit
Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user…
-
Unscored —CVE-1999-1553 Public exploit
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a lon…
-
Unscored —CVE-1999-1399 Public exploit
spaceball program in SpaceWare 7.3 v1.0 in IRIX 6.2 allows local users to gain root privileges by setting the HOSTNAME …
-
Unscored —
The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.
-
Unscored —CVE-1999-1171 Public exploit
IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags"…
-
Unscored —
ProSoft Netware Client 5.12 on Macintosh MacOS 9 does not automatically log a user out of the NDS tree when the user lo…
-
Unscored —
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1…
-
Unscored —
AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder …
-
Unscored —CVE-1999-1532 Public exploit
Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion)…
-
Unscored —CVE-1999-1016 Public exploit
Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudo…
-
Unscored —
Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with …
-
Unscored —
Vulnerability in (1) diskperf and (2) diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files,…
-
Unscored —CVE-1999-1508 Public exploit
Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by d…
-
Unscored —CVE-1999-1219 Public exploit
Vulnerability in sgihelp in the SGI help system and print manager in IRIX 5.2 and earlier allows local users to gain ro…
-
Unscored —
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.
-
Unscored —
NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it rep…
-
Unscored —
Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of ser…
-
Unscored —
Vulnerability in ptrace in AIX 4.3 allows local users to gain privileges by attaching to a setgid program.
-
Unscored —
HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that co…
-
Unscored —CVE-1999-1291 EPSS 13%
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset co…
-
Unscored —
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, a…
-
Unscored —
Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the con…
-
Unscored —
SVGAlib zgv 3.0-7 and earlier allows local users to gain root access via a privilege leak of the iopl(3) privileges to …
-
Unscored —
SystemSoft SystemWizard package in HP Pavilion PC with Windows 98, and possibly other platforms and operating systems, …
-
Unscored —CVE-1999-1499 Public exploit
named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root k…
-
Unscored —
Internet Anywhere POP3 Mail Server 2.3.1 allows remote attackers to cause a denial of service (crash) via (1) LIST, (2)…
-
Unscored —
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, whic…
-
Unscored —
Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line ar…
-
Unscored —
dxchpwd in Digital Unix (OSF/1) 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.lo…
-
Unscored —CVE-1999-1461 Public exploit
inpview in InPerson on IRIX 5.3 through IRIX 6.5.10 trusts the PATH environmental variable to find and execute the ttse…
-
Unscored —CVE-1999-1166 Public exploit
Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by acc…
-
Unscored —
runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allo…
-
Unscored —
mknod in Linux 2.2 follows symbolic links, which could allow local users to overwrite files or gain privileges.
-
Unscored —
Buffer overflow in kppp in KDE allows local users to gain root access via a long PATH environmental variable.
-
Unscored —
Micah Software Full Armor Network Configurator and Zero Administration allow local users with physical access to bypass…
-
Unscored —
.sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appen…
-
Unscored —
ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the exist…