Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote att…
-
Unscored —CVE-1999-1184 Public exploit
Buffer overflow in Elm 2.4 and earlier allows local users to gain privileges via a long TERM environmental variable.
-
Unscored —
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with …
-
Unscored —CVE-1999-1410 Public exploit
addnetpr in IRIX 5.3 and 6.2 allows local users to overwrite arbitrary files and possibly gain root privileges via a sy…
-
Unscored —
rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence o…
-
Unscored —
FORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP SYN scan with TCP/IP O…
-
Unscored —
Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could all…
-
Unscored —
Xyplex terminal server 6.0.1S1, and possibly other versions, allows remote attackers to bypass the password prompt by e…
-
Unscored —
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
-
Unscored —
tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inp…
-
Unscored —
Buffer overflow in CSM Proxy 4.1 allows remote attackers to cause a denial of service (crash) via a long string to the …
-
Unscored —CVE-1999-1164 EPSS 13%
Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with t…
-
Unscored —
NBase switches NH208 and NH215 run a TFTP server which allows remote attackers to send software updates to modify the s…
-
Unscored —
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
-
Unscored —
SMTP server in SLmail 3.1 and earlier allows remote attackers to cause a denial of service via malformed commands whose…
-
Unscored —
(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell m…
-
Unscored —
Linux 2.1.132 and earlier allows local users to cause a denial of service (resource exhaustion) by reading a large buff…
-
Unscored —
genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sen…
-
Unscored —CVE-1999-1084 Public exploit
The "AEDebug" registry key is installed with insecure permissions, which allows local users to modify the key to specif…
-
Unscored —
System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan hor…
-
Unscored —
RealSystem G2 server stores the administrator password in cleartext in a world-readable configuration file, which allow…
-
Unscored —
Macromedia Dreamweaver uses weak encryption to store FTP passwords, which could allow local users to easily decrypt the…
-
Unscored —
guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows rem…
-
Unscored —
install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to chang…
-
Unscored —
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allo…
-
Unscored —
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the D…
-
Unscored —
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
-
Unscored —
xterm in Digital UNIX 4.0B *with* patch kit 5 allows local users to overwrite arbitrary files via a symlink attack on a…
-
Unscored —
The Economist screen saver 1999 with the "Password Protected" option enabled allows users with physical access to the m…
-
Unscored —
Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long d…
-
Unscored —
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, allow remote attackers to bypass print filters …
-
Unscored —
Oracle Database Assistant 1.0 in Oracle 8.0.3 Enterprise Edition stores the database master password in plaintext in th…
-
Unscored —
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does …
-
Unscored —CVE-1999-1498 Public exploit
Slackware Linux 3.4 pkgtool allows local attacker to read and write to arbitrary files via a symlink attack on the repl…
-
Unscored —
Buffer overflow in cidentd ident daemon allows local users to gain root privileges via a long line in the .authlie scri…
-
Unscored —
Vulnerability in /bin/mail in SunOS 4.1.1 and earlier allows local users to gain root privileges via certain command li…
-
Unscored —
Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arb…
-
Unscored —
Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an …
-
Unscored —
COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res_…
-
Unscored —
HP-UX 9.x and 10.x running X windows may allow local attackers to gain privileges via (1) vuefile, (2) vuepad, (3) dtfi…