2 February 2002

110 results · Feed

• Unscored —
  CVE-2001-1019

  Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary…

  Feb 2, 2002
• Unscored —
  CVE-2001-1024

  login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly …

  Feb 2, 2002
• Unscored —
  CVE-2001-1025

  PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when callin…

  Feb 2, 2002
• Unscored —
  CVE-2001-1000 Public exploit

  rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to r…

  Feb 2, 2002
• Unscored —
  CVE-2001-1070

  Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a s…

  Feb 2, 2002
• Unscored —
  CVE-2001-1041

  oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on…

  Feb 2, 2002
• Unscored —
  CVE-2001-1006

  Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its pa…

  Feb 2, 2002
• Unscored —
  CVE-2001-1050

  CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request…

  Feb 2, 2002
• Unscored —
  CVE-2001-1005

  Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registr…

  Feb 2, 2002
• Unscored —
  CVE-2001-1026

  Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) u…

  Feb 2, 2002
• Unscored —
  CVE-2001-1042

  Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) fil…

  Feb 2, 2002
• Unscored —
  CVE-2001-1047

  Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in …

  Feb 2, 2002
• Unscored —
  CVE-2001-1058

  The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by…

  Feb 2, 2002
• Unscored —
  CVE-2001-1064 Public exploit

  Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via mu…

  Feb 2, 2002
• Unscored —
  CVE-2001-1015 Public exploit

  Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long comma…

  Feb 2, 2002
• Unscored —
  CVE-2001-1073

  Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that gene…

  Feb 2, 2002
• Unscored —
  CVE-2001-1014

  eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the se…

  Feb 2, 2002
• Unscored —
  CVE-2001-1078 Public exploit

  Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privil…

  Feb 2, 2002
• Unscored —
  CVE-2001-1044 Public exploit

  Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does…

  Feb 2, 2002
• Unscored —
  CVE-2001-1061

  Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.

  Feb 2, 2002
• Unscored —
  CVE-2001-1003 Public exploit

  Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can re…

  Feb 2, 2002
• Unscored —
  CVE-2001-1018

  Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is ena…

  Feb 2, 2002
• Unscored —
  CVE-2001-1045 Public exploit

  Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to r…

  Feb 2, 2002
• Unscored —
  CVE-2001-1060

  phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the st…

  Feb 2, 2002
• Unscored —
  CVE-2001-1007

  Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a …

  Feb 2, 2002
• Unscored —
  CVE-2001-1004

  Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbit…

  Feb 2, 2002
• Unscored —
  CVE-2001-1033

  Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not …

  Feb 2, 2002
• Unscored —
  CVE-2001-1057

  The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource…

  Feb 2, 2002
• Unscored —
  CVE-2001-1068

  qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid userna…

  Feb 2, 2002
• Unscored —
  CVE-2001-1051

  Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via a…

  Feb 2, 2002