Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allow…
-
Unscored —
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has …
-
Unscored —CVE-1999-1109 Public exploit
Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then d…
-
Unscored —
A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, a…
-
Unscored —
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
-
Unscored —
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and…
-
Unscored —
Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by r…
-
Unscored —
Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a larg…
-
Unscored —
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump.
-
Unscored —CVE-1999-1409 Public exploit
The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submi…
-
Unscored —
The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notif…
-
Unscored —
An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view …
-
Unscored —
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows lo…
-
Unscored —
snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read…
-
Unscored —
SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically…
-
Unscored —
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which all…
-
Unscored —
The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "…
-
Unscored —
Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary…
-
Unscored —CVE-1999-1117 Public exploit
lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line pa…
-
Unscored —
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrit…
-
Unscored —
pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malform…
-
Unscored —CVE-1999-1028 Public exploit
Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of da…
-
Unscored —
Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions in…
-
Unscored —
rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file.
-
Unscored —
LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which c…
-
Unscored —CVE-1999-1478 EPSS 18%
The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSp…
-
Unscored —
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source add…
-
Unscored —CVE-1999-1423 Public exploit
ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multica…
-
Unscored —
Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spo…
-
Unscored —
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly en…
-
Unscored —
Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command li…
-
Unscored —
RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts …
-
Unscored —
3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboo…
-
Unscored —
Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mec…
-
Unscored —
The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su …
-
Unscored —
Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue …
-
Unscored —
When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authenticat…
-
Unscored —
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and…
-
Unscored —CVE-1999-1488 Public exploit
sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication.
-
Unscored —
Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environ…