Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
Vulnerability in DEC OpenVMS VAX 5.5-2 through 5.0, and OpenVMS AXP 1.0, allows local users to gain system privileges.
-
Unscored —
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files.
-
Unscored —
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argu…
-
Unscored —
Linuxconf on Red Hat Linux 6.0 and earlier does not properly disable PAM-based access to the shutdown command, which co…
-
Unscored —
Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when ext…
-
Unscored —
Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia.
-
Unscored —
Vulnerability in object server program in SGI IRIX 5.2 through 6.1 allows remote attackers to gain root privileges in c…
-
Unscored —
Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user nam…
-
Unscored —
Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
-
Unscored —
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions …
-
Unscored —
Buffer overflow in kppp in KDE allows local users to gain root access via a long -c (account_name) command line argumen…
-
Unscored —
Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
-
Unscored —
UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allow…
-
Unscored —CVE-1999-1030 Public exploit
counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via an HTTP request that ends in %0A (new…
-
Unscored —
Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly exe…
-
Unscored —
Various modems that do not implement a guard time, or are configured with a guard time of 0, can allow remote attackers…
-
Unscored —CVE-1999-1020 Public exploit
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which all…
-
Unscored —
Buffer overflow in web administration feature of Kolban Webcam32 4.8.3 and earlier allows remote attackers to execute a…
-
Unscored —
Buffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of service, and possibly …
-
Unscored —CVE-1999-1477 Public exploit
Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in progra…
-
Unscored —CVE-1999-1483 Public exploit
Buffer overflow in zgv in svgalib 1.2.10 and earlier allows local users to execute arbitrary code via a long HOME envir…
-
Unscored —
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Int…
-
Unscored —
Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute a…
-
Unscored —CVE-1999-1190 Public exploit
Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands …
-
Unscored —CVE-1999-1491 Public exploit
abuse.console in Red Hat 2.1 uses relative pathnames to find and execute the undrv program, which allows local users to…
-
Unscored —
IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output fil…
-
Unscored —
CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters i…
-
Unscored —
Vulnerability in Monitor utility (SYS$SHARE:SPISHR.EXE) in VMS 5.0 through 5.4-2 allows local users to gain privileges.
-
Unscored —CVE-1999-1442 Public exploit
Bug in AMD K6 processor on Linux 2.0.x and 2.1.x kernels allows local users to cause a denial of service (crash) via a …
-
Unscored —
Buffer overflow in kscreensaver in KDE klock allows local users to gain root privileges via a long HOME environmental v…
-
Unscored —CVE-1999-1024 Public exploit
ip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a packet with a zero length…
-
Unscored —
Joe's Own Editor (joe) 2.8 sets the world-readable permission on its crash-save file, DEADJOE, which could allow local …
-
Unscored —
Screen savers in KDE beta 3 allows local users to overwrite arbitrary files via a symlink attack on the .kss.pid file.
-
Unscored —CVE-1999-1566 Public exploit
Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connec…
-
Unscored —
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are execu…
-
Unscored —
Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly…
-
Unscored —
Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-ma…
-
Unscored —CVE-1999-1376 EPSS 24%
Buffer overflow in fpcount.exe in IIS 4.0 with FrontPage Server Extensions allows remote attackers to execute arbitrary…
-
Unscored —
PowerPoint 95 and 97 allows remote attackers to cause an application to be run automatically without prompting the user…
-
Unscored —CVE-1999-1394 Public exploit
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and appen…