Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —
SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically…
-
Unscored —
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which all…
-
Unscored —
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "…
-
Unscored —
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary…
-
Unscored —CVE-1999-1117 Public exploit
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line pa…
-
Unscored —
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrit…
-
Unscored —
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malform…
-
Unscored —CVE-1999-1028 Public exploit
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of da…
-
Unscored —
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions in…
-
Unscored —
rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
-
Unscored —
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which c…
-
Unscored —CVE-1999-1478 EPSS 18%
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSp…
-
Unscored —
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source add…
-
Unscored —CVE-1999-1423 Public exploit
ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multica…
-
Unscored —
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spo…
-
Unscored —
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly en…
-
Unscored —
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command li…
-
Unscored —
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts …
-
Unscored —
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboo…
-
Unscored —
Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mec…
-
Unscored —
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su …
-
Unscored —
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue …
-
Unscored —
When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticat…
-
Unscored —
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and…
-
Unscored —CVE-1999-1488 Public exploit
sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
-
Unscored —
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environ…
-
Unscored —
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it eas…
-
Unscored —CVE-1999-1094 EPSS 18%
Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long …
-
Unscored —CVE-1999-1414 Public exploit
IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process …
-
Unscored —
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges.
-
Unscored —
Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extr…
-
Unscored —
A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-ba…
-
Unscored —
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an in…
-
Unscored —
Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packe…
-
Unscored —
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the a…
-
Unscored —CVE-1999-1437 Public exploit
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full…
-
Unscored —
netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is …
-
Unscored —
VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS_DUMP dcl command.
-
Unscored —
thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than on…
-
Unscored —
Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privi…