Archive
9 March 2002
Vulnerabilities first published on this day (UTC), newest first.
428 results · Feed
-
Unscored —
Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setui…
-
Unscored —
Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privile…
-
Unscored —
Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effecti…
-
Unscored —
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) mo…
-
Unscored —
Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could …
-
Unscored —CVE-1999-1191 Public exploit
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command lin…
-
Unscored —
Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a …
-
Unscored —CVE-1999-1494 Public exploit
colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argum…
-
Unscored —
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? ob…
-
Unscored —
linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access…
-
Unscored —
Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option.
-
Unscored —
Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, whi…
-
Unscored —
Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and wi…
-
Unscored —
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3…
-
Unscored —
Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files…
-
Unscored —
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root.
-
Unscored —
gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a s…
-
Unscored —
VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user acco…
-
Unscored —
BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command …
-
Unscored —
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that wa…
-
Unscored —
Vulnerability in the /etc/suid_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (k…
-
Unscored —
Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute a…
-
Unscored —
The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read fro…
-
Unscored —
mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords fo…
-
Unscored —
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
-
Unscored —
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -fil…
-
Unscored —
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by mod…
-
Unscored —
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
-
Unscored —
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which re…
-
Unscored —
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system…
-
Unscored —CVE-1999-1127 EPSS 18%
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a…
-
Unscored —
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencod…
-
Unscored —
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and p…
-
Unscored —CVE-1999-1433 Public exploit
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on …
-
Unscored —
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the a…
-
Unscored —CVE-1999-1132 EPSS 18%
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a…
-
Unscored —CVE-1999-1148 EPSS 17%
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many …
-
Unscored —CVE-1999-1432 Public exploit
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-susp…
-
Unscored —
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root a…
-
Unscored —
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to …