Archive
September 2004
Vulnerabilities first published in this month (UTC), newest first.
563 results · Feed
-
Unscored —CVE-2001-0423 Public exploit
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environm…
-
Unscored —CVE-2001-0902 EPSS 19%
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newlin…
-
Unscored —
McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number o…
-
Unscored —
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbit…
-
Unscored —CVE-2001-0485 Public exploit
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attac…
-
Unscored —
DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which all…
-
Unscored —
Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root director…
-
Unscored —CVE-2001-0548 Public exploit
Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.
-
Unscored —CVE-2001-0741 Public exploit
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
-
Unscored —
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitr…
-
Unscored —
Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.
-
Unscored —
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) …
-
Unscored —
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to …
-
Unscored —CVE-2001-0907 Public exploit
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a seri…
-
Unscored —CVE-2001-0042 Public exploit
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack conta…
-
Unscored —
The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to att…
-
Unscored —
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local user…
-
Unscored —CVE-2001-1328 EPSS 17%
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
-
Unscored —
The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood …
-
Unscored —
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow l…
-
Unscored —
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension,…
-
Unscored —
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value …
-
Unscored —CVE-2001-1347 Public exploit
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpo…
-
Unscored —
libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable perm…
-
Unscored —
Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory.
-
Unscored —
FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObj…
-
Unscored —
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and p…
-
Unscored —
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify th…
-
Unscored —CVE-2001-1029 Public exploit
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading th…
-
Unscored —
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause …
-
Unscored —
Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript …
-
Unscored —
Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during…
-
Unscored —
Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot…
-
Unscored —
Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript …
-
Unscored —
Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial o…
-
Unscored —
Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26,…
-
Unscored —
Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long p…
-
Unscored —
article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invali…