Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —CVE-1999-1035 EPSS 17%
IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET reques…
-
Unscored —
Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows …
-
Unscored —CVE-1999-1472 EPSS 17%
Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small I…
-
Unscored —CVE-1999-1014 Public exploit
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
-
Unscored —
wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during …
-
Unscored —CVE-1999-1243 Public exploit
SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and…
-
Unscored —
Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privil…
-
Unscored —
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
-
Unscored —
Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges.
-
Unscored —
Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial…
-
Unscored —
Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined ob…
-
Unscored —CVE-1999-1384 Public exploit
Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain r…
-
Unscored —
FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute a…
-
Unscored —
BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to g…
-
Unscored —
Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges.
-
Unscored —
IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does …
-
Unscored —CVE-1999-1208 Public exploit
Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argum…
-
Unscored —
Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address…
-
Unscored —
movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges.
-
Unscored —CVE-1999-1114 Public exploit
Buffer overflow in Korn Shell (ksh) suid_exec program on IRIX 6.x and earlier, and possibly other operating systems, al…
-
Unscored —
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directorie…
-
Unscored —
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which a…
-
Unscored —
Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enab…
-
Unscored —
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and inpu…
-
Unscored —
fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root ac…
-
Unscored —
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and…
-
Unscored —
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allow…
-
Unscored —
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has …
-
Unscored —CVE-1999-1109 Public exploit
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then d…
-
Unscored —
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, a…
-
Unscored —
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
-
Unscored —
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and…
-
Unscored —
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by r…
-
Unscored —
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a larg…
-
Unscored —
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
-
Unscored —CVE-1999-1409 Public exploit
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submi…
-
Unscored —
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notif…
-
Unscored —
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view …
-
Unscored —
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows lo…
-
Unscored —
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read…