[CLOSE] OSVDB ID : 86897 - Disclosed: 2001-04-18

Description:

Oracle on Windows contains a flaw that may allow a remote denial of service. The issue is triggered when an error occurs in TNSLSNR80.EXE during the handling of malformed input, which will result in all available system resources becoming consumed. This will cause a loss of availability for the server.

[CLOSE] OSVDB ID : 1797 - Disclosed: 2001-04-18

Description:

(Description Provided by CVE) : Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carrage return <CR> that is not followed by a line feed <LF>.

[CLOSE] OSVDB ID : 11345 - Disclosed: 2001-04-18

Description:

(Description Provided by CVE) : Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.

[CLOSE] OSVDB ID : 12991 - Disclosed: 2001-04-18

Description:

(Description Provided by CVE) : kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.

[CLOSE] OSVDB ID : 7054 - Disclosed: 2001-04-18

Description:

Timbuktu contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when a local attacker enters the "About Timbuktu" menu, which provides access to the Apple menu and System Preferences. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 7168 - Disclosed: 2001-04-18

Description:

(Description Provided by CVE) : Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.

[CLOSE] OSVDB ID : 13900 - Disclosed: 2001-04-18

Description:

iPlanet contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a malicious user attempts to access the world readable /opt/SUNWics5/cal/bin/config/ics.conf file, which will disclose usernames and passwords for the NAS LDAP database resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 19132 - Disclosed: 2001-04-18

Description:

(Description Provided by CVE) : Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

[CLOSE] OSVDB ID : 6664 - Disclosed: 2001-04-17

Description:

GoAhead WebServer on Windows contains a flaw that may allow a remote denial of service. The issue is triggered when an attacker requests the /aux directory (and likely other MS-DOS reserved names) which will result in a loss of availability for the web server.

[CLOSE] OSVDB ID : 3781 - Disclosed: 2001-04-17

Description:

AnalogX SimpleServer:WWW contains a flaw that allows a remote attacker to crash the service. The issue is due to improper checking of GET requests made to the server. If a remote user requests a URL with a conventional DOS device name such as "aux", they may crash the server.

[CLOSE] OSVDB ID : 8684 - Disclosed: 2001-04-17

Description:

(Description Provided by CVE) : FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.

[CLOSE] OSVDB ID : 13870 - Disclosed: 2001-04-17

Description:

(Description Provided by CVE) : Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

[CLOSE] OSVDB ID : 13871 - Disclosed: 2001-04-17

Description:

(Description Provided by CVE) : Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

[CLOSE] OSVDB ID : 13872 - Disclosed: 2001-04-17

Description:

(Description Provided by CVE) : Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.

[CLOSE] OSVDB ID : 1805 - Disclosed: 2001-04-17

Description:

gFTP contains a flaw that may allow a remote attacker to execute arbitrary code on a gftp user's system. The issue is triggered when an untrusted value is passed to a printf() function in the facility used by its client program to log FTP and HTTP responses. It is possible that the flaw may allow a remote attacker using a remote FTP server to execute arbitrary code on a gftp user's system resulting in a loss of integrity.

[CLOSE] OSVDB ID : 3085 - Disclosed: 2001-04-17

Description:

Qualcomm Eudora contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker emails a message with a plaintext attachment containing the full path of a desired file on the victim's system. The file is sent to the attacker when the message is forwarded, resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 5599 - Disclosed: 2001-04-17

Description:

Viking Web Server contains a flaw that allows a remote attacker to request files outside of the web path. The issue is due to the program not properly sanitizing user input, specifically traversal style attacks (../../) can be accomplished by encoding the ../ using %2E%2E/.

[CLOSE] OSVDB ID : 11640 - Disclosed: 2001-04-17

Description:

(Description Provided by CVE) : Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.

[CLOSE] OSVDB ID : 5704 - Disclosed: 2001-04-16

Description:

iPlanet Web Server Enterprise Edition 4.1 and earlier contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker fills the Host: header with characters that will be automatically URL-encoded by iPlanet before response handlers are called, which can either: disclose the heap contents written by other server functions information resulting in a loss of confidentiality; or cause a server thread/process to crash resulting in a loss of availability.

[CLOSE] OSVDB ID : 1789 - Disclosed: 2001-04-16

Description:

(Description Provided by CVE) : Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.

[CLOSE] OSVDB ID : 7858 - Disclosed: 2001-04-16

Description:

Microsoft Internet Explorer contains a flaw related to the displaying of file extensions on links that may allow an attacker to trick a user into executing a potential dangerous file.

[CLOSE] OSVDB ID : 21047 - Disclosed: 2001-04-16

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 803 - Disclosed: 2001-04-16

Description:

(Description Provided by CVE) : Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service.

[CLOSE] OSVDB ID : 7145 - Disclosed: 2001-04-16

Description:

Interchange contains a flaw that may allow a remote attacker to access arbitrary files in the catalog directory including plaintext sources to database tables. The issue is due to the do_view administrative script not properly authenticating before handling the request.

[CLOSE] OSVDB ID : 7146 - Disclosed: 2001-04-16

Description:

Interchange contains a flaw that may allow a remote attacker to overwrite files in the catalog directory. The issue is due to the page_save administrative script not properly authenticating before handling the request.

[CLOSE] OSVDB ID : 12208 - Disclosed: 2001-04-16

Description:

(Description Provided by CVE) : BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.

[CLOSE] OSVDB ID : 5642 - Disclosed: 2001-04-15

Description:

A local race condition exists in Exuberant Ctags. The software fails to properly set file permissions on temporary files. It may be possible for an attacker to use a symbolic link to the temporary file to overwrite any file on the system which could result in loss of integrity and/or availability.

[CLOSE] OSVDB ID : 13863 - Disclosed: 2001-04-14

Description:

(Description Provided by CVE) : ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.

[CLOSE] OSVDB ID : 5955 - Disclosed: 2001-04-14

Description:

DansGuardian contains a flaw that may allow some pages or URLs to occasionally bypass the filter. No further details have been provided.

[CLOSE] OSVDB ID : 539 - Disclosed: 2001-04-13

Description:

This host is running the 'Trend Micro Interscan Virus Wall 3.0.1'. This application is vulnerable to a remote buffer overflow. This overflow occurs in the 'catinfo' CGI program. By issuing a malformed request, an attacker can gain access to this host.

[CLOSE] OSVDB ID : 7657 - Disclosed: 2001-04-13

Description:

A local overflow exists in OpenServer. The cancel command fails to validate user-supplied input resulting in a buffer overflow. With a specially crafted request consisting of a long character string, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 9677 - Disclosed: 2001-04-13

Description:

(Description Provided by CVE) : IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.

[CLOSE] OSVDB ID : 13841 - Disclosed: 2001-04-13

Description:

A remote overflow exists in Netscape SmartDownload. sdph20.dll included with SmartDownload fails to correctly check the length of the URL of the file to download resulting in a buffer overflow. With a specially crafted request with a URL whose length is greater than 256 characters, an attacker can cause arbitrary code execution on the victim's computer resulting in a loss of integrity.

[CLOSE] OSVDB ID : 13876 - Disclosed: 2001-04-13

Description:

(Description Provided by CVE) : content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter.

[CLOSE] OSVDB ID : 607 - Disclosed: 2001-04-13

Description:

This host is running the 'Trend Micro Interscan VirusWall' software. This software package is designed to scan for virus activity in Internet traffic. The web management interface included with this product does not properly authenticate users. An attacker could make changes to the configuration, and could remove the virus protection on the network.

[CLOSE] OSVDB ID : 1794 - Disclosed: 2001-04-13

Description:

QVT/Net contains a flaw that allows a remote attacker to access arbitrary fles and directories outside of the web path. The issue is due to the server not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the FTP command.

[CLOSE] OSVDB ID : 4050 - Disclosed: 2001-04-13

Description:

QVT/Term contains a flaw that allows a remote attacker to access arbitrary fles and directories outside of the web path. The issue is due to the server not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the FTP command.

[CLOSE] OSVDB ID : 7650 - Disclosed: 2001-04-13

Description:

A local overflow exists in OpenServer. The lp command fails to validate user-supplied input resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 7651 - Disclosed: 2001-04-13

Description:

A local overflow exists in OpenServer. The tput command fails to validate user-supplied input resulting in a buffer overflow. With a specially crafted request consisting of a long string argument, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 7652 - Disclosed: 2001-04-13

Description:

A local overflow exists in OpenServer. The rmail command fails to validate user-supplied input resulting in a buffer overflow. With a specially crafted request consisting of a very long character string, an attacker can cause arbitrary code execution resulting in a loss of integrity.