Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "…
-
Unscored —
Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remot…
-
Unscored —
Vulnerability in VUE 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
-
Unscored —
Vulnerability in accton in Cray UNICOS 6.1 and 6.0 allows local users to read arbitrary files and modify system account…
-
Unscored —
Internet Anywhere Mail Server 2.3.1 stores passwords in plaintext in the msgboxes.dbf file, which could allow local use…
-
Unscored —
Vulnerability in man.sh CGI script, included in May 1998 issue of SysAdmin Magazine, allows remote attackers to execute…
-
Unscored —
Internet Explorer 3.01 on Windows 95 allows remote malicious web sites to execute arbitrary commands via a .isp file, w…
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local u…
-
Unscored —
Vulnerability in finger in Commodore Amiga UNIX 2.1p2a and earlier allows local users to read arbitrary files.
-
Unscored —
BMC Patrol component, when installed with Compaq Insight Management Agent 4.23 and earlier, or Management Agents for Se…
-
Unscored —
Vulnerability in direct audio user space code on HP-UX 10.20 and 10.10 allows local users to cause a denial of service.
-
Unscored —
Vulnerabilities in DECnet/OSI for OpenVMS before 5.8 on DEC Alpha AXP and VAX/VMS systems allow local users to gain pri…
-
Unscored —
O'Reilly WebSite 1.1e and Website Pro 2.0 allows remote attackers to execute arbitrary commands via shell metacharacter…
-
Unscored —
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut …
-
Unscored —
WS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily …
-
Unscored —
Ascom Timeplex router allows remote attackers to obtain sensitive information or conduct unauthorized activities by ent…
-
Unscored —
Nachuatec D435 and D445 printer allows remote attackers to cause a denial of service via ICMP redirect storm.
-
Unscored —CVE-1999-1254 EPSS 13%
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from …
-
Unscored —CVE-1999-1234 EPSS 13%
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a ca…
-
Unscored —
Seapine Software TestTrack server allows a remote attacker to cause a denial of service (high CPU) via (1) TestTrackWeb…
-
Unscored —
By design, Maximizer Enterprise 4 calendar and address book program allows arbitrary users to modify the calendar of ot…
-
Unscored —
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 1…
-
Unscored —
Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of s…
-
Unscored —
Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat …
-
Unscored —CVE-1999-1518 Public exploit
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service …
-
Unscored —
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple time…
-
Unscored —CVE-1999-1436 Public exploit
Ray Chan WWW Authorization Gateway 0.1 CGI program allows remote attackers to execute arbitrary commands via shell meta…
-
Unscored —
Auto_FTP.pl script in Auto_FTP 0.2 uses the /tmp/ftp_tmp as a shared directory with insecure permissions, which allows …
-
Unscored —CVE-1999-1041 Public exploit
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a l…
-
Unscored —
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain …
-
Unscored —
mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, …
-
Unscored —
Eastman Work Management 3.21 stores passwords in cleartext in the COMMON and LOCATOR registry keys, which could allow l…
-
Unscored —
Vulnerability in in.telnetd in SunOS 4.1.1 and earlier allows local users to gain root privileges.
-
Unscored —
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /d…
-
Unscored —CVE-1999-1463 EPSS 17%
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) …
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain roo…
-
Unscored —
Xsession in Red Hat Linux 6.1 and earlier can allow local users with restricted accounts to bypass execution of the .xs…
-
Unscored —
Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.
-
Unscored —
Vulnerability in Support Watch (aka SupportWatch) in HP-UX 8.0 through 9.0 allows local users to gain privileges.
-
Unscored —CVE-1999-1082 Public exploit
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a …