Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
FileSystemObject (FSO) in the showfile.asp Active Server Page (ASP) allows remote attackers to read arbitrary files by …
-
Unscored —CVE-1999-1110 Public exploit
Windows Media Player ActiveX object as used in Internet Explorer 5.0 returns a specific error code when a file does not…
-
Unscored —
Vulnerability in (1) diskalign and (2) diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-own…
-
Unscored —
GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to …
-
Unscored —
A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly …
-
Unscored —
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filt…
-
Unscored —
AnswerBook2 (AB2) web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service (resource exhaustion) v…
-
Unscored —
Vulnerability in crp in Hewlett Packard Apollo Domain OS SR10 through SR10.3 allows remote attackers to gain root privi…
-
Unscored —
Untrusted search path vulnerability in day5datacopier in SGI IRIX 6.2 allows local users to execute arbitrary commands …
-
Unscored —
Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the wor…
-
Unscored —
Compaq/Microcom 6000 Access Integrator does not disconnect a client after a certain number of failed login attempts, wh…
-
Unscored —
Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8…
-
Unscored —
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by …
-
Unscored —
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
-
Unscored —CVE-1999-1489 Public exploit
Buffer overflow in TestChip function in XFree86 SuperProbe in Slackware Linux 3.1 allows local users to gain root privi…
-
Unscored —
Management information base (MIB) for a 3Com SuperStack II hub running software version 2.10 contains an object identif…
-
Unscored —
Auto_FTP.pl script in Auto_FTP 0.2 stores usernames and passwords in plaintext in the auto_ftp.conf configuration file.
-
Unscored —
Vulnerability in Desktop searchbook program in IRIX 5.0.x through 6.2 sets insecure permissions for certain user files …
-
Unscored —
A buffer overflow exists in the HELO command in Trend Micro Interscan VirusWall SMTP gateway 3.23/3.3 for NT, which may…
-
Unscored —
Vulnerability in union file system in FreeBSD 2.2 and earlier, and possibly other operating systems, allows local users…
-
Unscored —
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precach…
-
Unscored —
Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users …
-
Unscored —
Vulnerability in HP Camera component of HP DCE/9000 in HP-UX 9.x allows attackers to gain root privileges.
-
Unscored —
HP Laserjet printers with JetDirect cards, when configured with TCP/IP, can be configured without a password, which all…
-
Unscored —
Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute a…
-
Unscored —CVE-1999-1555 Public exploit
Cheyenne InocuLAN Anti-Virus Server in Inoculan 4.0 before Service Pack 2 creates an update directory with "EVERYONE FU…
-
Unscored —
SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash…
-
Unscored —
Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the …
-
Unscored —
shell-lock in Cactus Software Shell Lock uses weak encryption (trivial encoding) which allows attackers to easily decry…
-
Unscored —
Opera 3.2.1 allows remote attackers to cause a denial of service (application crash) via a URL that contains an extra /…
-
Unscored —CVE-1999-1235 Public exploit
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local…
-
Unscored —
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin.
-
Unscored —CVE-1999-1123 Public exploit
The installation of Sun Source (sunsrc) tapes allows local users to gain root privileges via setuid root programs (1) m…
-
Unscored —
/usr/sbin/Mail on SGI IRIX 3.3 and 3.3.1 does not properly set the group ID to the group ID of the user who started Mai…
-
Unscored —CVE-1999-1434 Public exploit
login in Slackware Linux 3.2 through 3.5 does not properly check for an error when the /etc/group file is missing, whic…
-
Unscored —
Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web…
-
Unscored —
Oracle Webserver 2.1, when serving PL/SQL stored procedures, allows remote attackers to cause a denial of service via a…
-
Unscored —CVE-1999-1543 Public exploit
MacOS uses weak encryption for passwords that are stored in the Users & Groups Data File.
-
Unscored —
Idle locking function in MacOS 9 allows local users to bypass the password protection of idled sessions by selecting th…
-
Unscored —CVE-1999-1398 Public exploit
Vulnerability in xfsdump in SGI IRIX may allow local users to obtain root privileges via the bck.log log file, possibly…