[CLOSE] OSVDB ID : 1752 - Disclosed: 2001-01-31

Description:

(Description Provided by CVE) : Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.

[CLOSE] OSVDB ID : 1756 - Disclosed: 2001-01-31

Description:

(Description Provided by CVE) : Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.

[CLOSE] OSVDB ID : 10560 - Disclosed: 2001-01-31

Description:

(Description Provided by CVE) : Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.

[CLOSE] OSVDB ID : 1755 - Disclosed: 2001-01-31

Description:

(Description Provided by CVE) : Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability.

[CLOSE] OSVDB ID : 1757 - Disclosed: 2001-01-31

Description:

Cisco WebNS contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker uses specific input, which is not validated, to gain information about the directory structure or to read files.

[CLOSE] OSVDB ID : 8814 - Disclosed: 2001-01-31

Description:

(Description Provided by CVE) : Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.

[CLOSE] OSVDB ID : 44625 - Disclosed: 2001-01-31

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 59931 - Disclosed: 2001-01-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 11866 - Disclosed: 2001-01-30

Description:

(Description Provided by CVE) : Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.

[CLOSE] OSVDB ID : 13126 - Disclosed: 2001-01-30

Description:

(Description Provided by CVE) : Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.

[CLOSE] OSVDB ID : 6138 - Disclosed: 2001-01-30

Description:

Trend Micro's Virus Buster contains a flaw that may allow a remote denial of service. The issue is triggered when scanning a received email with "To" headers containing overly long strings, which could result in a crash of the system.

[CLOSE] OSVDB ID : 7931 - Disclosed: 2001-01-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 14795 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

[CLOSE] OSVDB ID : 1753 - Disclosed: 2001-01-29

Description:

FreeBSD contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when inetd incorrectly sets group privileges on child processes, and when an ident request is received, the process is assigned privileges of the wheel (root group), which will disclose the first 16 bytes of any wheel-accessible file resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 1746 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

[CLOSE] OSVDB ID : 1747 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

[CLOSE] OSVDB ID : 1751 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.

[CLOSE] OSVDB ID : 1754 - Disclosed: 2001-01-29

Description:

FreeBSD contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the periodic program uses insecure temporary file names in the /tmp directory. A malicious user could use this vulnerability to create a symbolic link in the /tmp directory to corrupt any file on the system. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 2034 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary file already exists, which causes sort to crash and possibly impacts security-sensitive scripts.

[CLOSE] OSVDB ID : 6280 - Disclosed: 2001-01-29

Description:

A remote overflow exists in AT&T WinVNC server. The HTTP component fails to use bounds resulting in a stack overflow. With a specially crafted request, an attacker can execute code remotely resulting in a loss of confidentiality, integrity and availability.

[CLOSE] OSVDB ID : 6281 - Disclosed: 2001-01-29

Description:

A buffer overflow exists in WinVNC. The client fails to validate rfbConnFailed packets resulting in a buffer overflow. With a specially crafted packet, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 8979 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

[CLOSE] OSVDB ID : 13125 - Disclosed: 2001-01-29

Description:

(Description Provided by CVE) : Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.

[CLOSE] OSVDB ID : 498 - Disclosed: 2001-01-28

Description:

(Description Provided by CVE) : Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.

[CLOSE] OSVDB ID : 57121 - Disclosed: 2001-01-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 28609 - Disclosed: 2001-01-27

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 5645 - Disclosed: 2001-01-26

Description:

vim contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when vim writes backup and temporary files to /tmp.

[CLOSE] OSVDB ID : 5844 - Disclosed: 2001-01-26

Description:

(Description Provided by CVE) : NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.

[CLOSE] OSVDB ID : 7169 - Disclosed: 2001-01-26

Description:

(Description Provided by CVE) : Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.

[CLOSE] OSVDB ID : 13842 - Disclosed: 2001-01-26

Description:

(Description Provided by CVE) : Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings (echo requests) to the network.

[CLOSE] OSVDB ID : 6019 - Disclosed: 2001-01-25

Description:

(Description Provided by CVE) : inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.

[CLOSE] OSVDB ID : 6402 - Disclosed: 2001-01-25

Description:

mIRC contains a flaw that may allow a malicious user to bypass lock protection. The issue is triggered by modifying the registry to disable the lock. It is possible that the flaw may allow unauthorized execution of the program resulting in a loss of integrity.

[CLOSE] OSVDB ID : 9534 - Disclosed: 2001-01-25

Description:

(Description Provided by CVE) : Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link.

[CLOSE] OSVDB ID : 9675 - Disclosed: 2001-01-25

Description:

(Description Provided by CVE) : IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing.

[CLOSE] OSVDB ID : 10892 - Disclosed: 2001-01-25

Description:

(Description Provided by CVE) : The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.

[CLOSE] OSVDB ID : 12651 - Disclosed: 2001-01-25

Description:

(Description Provided by CVE) : Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.

[CLOSE] OSVDB ID : 19103 - Disclosed: 2001-01-24

Description:

Alpha versions of the AOL Instant Messenger 4.4 version contain a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the log valid entry for an image upon submission to the AIM log file. This may allow a user to create a specially crafted "image" file by rearranging the HTML code used in the AIM client to send an image that would execute arbitrary Java or Javascript code in a user's browser within the trust relationship between their browser and the server if the user is convinced to click directly on the AIM IMLog.htm file instead of using AOL's internal log viewer.

[CLOSE] OSVDB ID : 499 - Disclosed: 2001-01-24

Description:

(Description Provided by CVE) : The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.

[CLOSE] OSVDB ID : 571 - Disclosed: 2001-01-24

Description:

(Description Provided by CVE) : The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.

[CLOSE] OSVDB ID : 1743 - Disclosed: 2001-01-23

Description:

FreeBSD and Mac OS X contain a flaw that may allow a malicious user to bypass a firewall. The issue is triggered when TCP packets with the ECE flag set are treated as being part of an already established TCP connection. It is possible that the flaw may allow a malicious user to bypass certain ipfw rules resulting in a loss of integrity.