Archive
March 2002
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by mod…
-
Unscored —
ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters.
-
Unscored —
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which re…
-
Unscored —
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system…
-
Unscored —CVE-1999-1127 EPSS 18%
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a…
-
Unscored —
Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencod…
-
Unscored —
Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and p…
-
Unscored —CVE-1999-1433 Public exploit
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on …
-
Unscored —
The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the a…
-
Unscored —CVE-1999-1132 EPSS 18%
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a…
-
Unscored —CVE-1999-1148 EPSS 17%
FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many …
-
Unscored —CVE-1999-1432 Public exploit
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-susp…
-
Unscored —
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root a…
-
Unscored —
Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to …
-
Unscored —
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console vi…
-
Unscored —
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root pri…
-
Unscored —
Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error s…
-
Unscored —
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0…
-
Unscored —CVE-1999-1157 EPSS 13%
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Add…
-
Unscored —
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data …
-
Unscored —
The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges.
-
Unscored —CVE-1999-1105 EPSS 22%
Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an a…
-
Unscored —
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote atta…
-
Unscored —
automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute…
-
Unscored —
The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffe…
-
Unscored —
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitr…
-
Unscored —
Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service …
-
Unscored —
Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the…
-
Unscored —CVE-1999-1120 Public exploit
netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable progr…
-
Unscored —CVE-1999-1093 EPSS 13%
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earli…
-
Unscored —
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which all…
-
Unscored —
Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field.
-
Unscored —CVE-1999-1194 Public exploit
chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges.
-
Unscored —
Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows att…
-
Unscored —
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the lo…
-
Unscored —
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass…
-
Unscored —
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
-
Unscored —
Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows l…
-
Unscored —CVE-1999-1402 Public exploit
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating…
-
Unscored —
Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LAN…