Archive
September 2001
Vulnerabilities first published in this month (UTC), newest first.
487 results · Feed
-
Unscored —
HP-UX 9.x does not properly enable the Xauthority mechanism in certain conditions, which could allow local users to acc…
-
Unscored —
Cisco Resource Manager (CRM) 1.0 and 1.1 creates world-readable log files and temporary files, which may expose sensiti…
-
Unscored —
ARCserve NT agents use weak encryption (XOR) for passwords, which allows remote attackers to sniff the authentication r…
-
Unscored —CVE-1999-1557 Public exploit
Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers…
-
Unscored —CVE-1999-1043 EPSS 13%
Microsoft Exchange Server 5.5 and 5.0 does not properly handle (1) malformed NNTP data, or (2) malformed SMTP data, whi…
-
Unscored —
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and…
-
Unscored —
Buffer overflow in MSN Setup BBS 4.71.0.10 ActiveX control (setupbbs.ocx) allows a remote attacker to execute arbitrary…
-
Unscored —CVE-1999-1413 Public exploit
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the s…
-
Unscored —
Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execu…
-
Unscored —
Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems…
-
Unscored —CVE-1999-1185 Public exploit
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscr…
-
Unscored —
DIT TransferPro installs devices with world-readable and world-writable permissions, which could allow local users to d…
-
Unscored —
Vulnerability in Vue 3.0 in HP 9.x allows local users to gain root privileges, as fixed by PHSS_4038, PHSS_4055, and PH…
-
Unscored —
Vulnerability in a script in Texas A&M University (TAMU) Tiger allows local users to execute arbitrary commands as the …
-
Unscored —CVE-1999-1340 Public exploit
Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.
-
Unscored —
Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.
-
Unscored —
Vulnerability in /usr/bin/mail in DEC ULTRIX before 4.2 allows local users to gain privileges.
-
Unscored —
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to …
-
Unscored —
Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands.
-
Unscored —
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, an…
-
Unscored —
Vulnerability in telnet service in HP-UX 10.30 allows attackers to cause a denial of service.
-
Unscored —
StarTech (1) POP3 proxy server and (2) telnet server allows remote attackers to cause a denial of service via a long US…
-
Unscored —CVE-1999-1521 Public exploit
Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM comman…
-
Unscored —
Vulnerability in subnetconfig in HP-UX 9.01 and 9.0 allows local users to gain privileges.
-
Unscored —
Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local …
-
Unscored —
Vulnerability in dtlogin and dtsession in HP-UX 10.20 and 10.10 allows local users to bypass authentication and gain pr…
-
Unscored —
Certain programs in HP-UX 10.20 do not properly handle large user IDs (UID) or group IDs (GID) over 60000, which could …
-
Unscored —
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum…
-
Unscored —
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the …
-
Unscored —CVE-1999-1241 EPSS 14%
Internet Explorer, with a security setting below Medium, allows remote attackers to execute arbitrary commands via a ma…
-
Unscored —
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key…
-
Unscored —
KMail in KDE 1.0 provides a PGP passphrase as a command line argument to other programs, which could allow local users …
-
Unscored —CVE-1999-1504 Public exploit
Stalker Internet Mail Server 1.6 allows a remote attacker to cause a denial of service (crash) via a long HELO command.
-
Unscored —
NBase switches NH2012, NH2012R, NH2015, and NH2048 have a back door password that cannot be disabled, which allows remo…
-
Unscored —
Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary c…
-
Unscored —
Compaq/Microcom 6000 Access Integrator does not cause a session timeout after prompting for a username or password, whi…
-
Unscored —CVE-1999-1286 Public exploit
addnetpr in SGI IRIX 6.2 and earlier allows local users to modify arbitrary files and possibly gain root access via a s…
-
Unscored —
KDE file manager (kfm) uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary…
-
Unscored —
Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry ke…
-
Unscored —CVE-1999-1408 Public exploit
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a …