[CLOSE] OSVDB ID : 6159 - Disclosed: 2001-05-31

Description:

(Description Provided by CVE) : Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access.

[CLOSE] OSVDB ID : 5544 - Disclosed: 2001-05-31

Description:

ACME Laboratories' Java class Acme.Serve.Serve contains a flaw that allows a remote attacker to traverse outside of the web path. The issue is due to the server not properly sanitizing user input, specifically crafted URI requests using multiple slahses (////). With such a request, an attacker can force the server to access arbitrary files or force a directory index listing.

[CLOSE] OSVDB ID : 1848 - Disclosed: 2001-05-31

Description:

WebNS contains a flaw that may allow a malicious user to gain access to administrative privileges. The issue is triggered when an attackers navigates directly to the web management URL, instead of navigating through the interface. It is possible that the flaw may allow administrative control of the device resulting in a loss of confidentiality, integrity, and/or availability.

[CLOSE] OSVDB ID : 6170 - Disclosed: 2001-05-31

Description:

A remote overflow exists in Trend Micro InterScan VirusWall. The FtpSaveCSP.dll file fails to validate bounds checking resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 6171 - Disclosed: 2001-05-31

Description:

A remote overflow exists in Trend Micro InterScan VirusWall. The FtpSaveCVP.dll file fails to validate bounds checking resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 11683 - Disclosed: 2001-05-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 11730 - Disclosed: 2001-05-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 5587 - Disclosed: 2001-05-30

Description:

(Description Provided by CVE) : Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.

[CLOSE] OSVDB ID : 1845 - Disclosed: 2001-05-30

Description:

GnuPG contains a flaw that may allow a malicious user to execute arbitrary code in the context of a user decrypting a given file. The issue is triggered when the attacker sends the victim a GPG message with a crafted filename, exploiting a format string vulnerability in the tty_printf() function. It is possible that the flaw may allow execution of code in the context of the target user, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 13971 - Disclosed: 2001-05-30

Description:

(Description Provided by CVE) : Buffer overflow in SpoonFTP 1.0.0.12 allows remote attacker to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.

[CLOSE] OSVDB ID : 7560 - Disclosed: 2001-05-29

Description:

NetBSD on Hitachi Super-H Architecture contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the "process_write_regs" kernel routine, which is used by the procfs and ptrace(2) facilities, fails to validate user-supplied Status Register contents, allowing a malicious user to execute code with elevated privileges. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 7561 - Disclosed: 2001-05-29

Description:

NetBSD on Hitachi Super-H Architecture contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the "sigreturn" system call fails to validate user-supplied Status Register contents, allowing a malicious user to execute code with elevated privileges. This flaw may lead to a loss of integrity.

[CLOSE] OSVDB ID : 8344 - Disclosed: 2001-05-29

Description:

Eudora contains a flaw that may allow a remote attacker to execute arbitrary code. The issue is triggered when the 'Use Microsoft Viewer' option is enabled and the 'allow executables in HTML content' option is disabled. It is possible that the flaw may allow a remote attacker to create a specially crafted HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the arbitrary code embedded in the attachment resulting in a loss of integrity.

[CLOSE] OSVDB ID : 1847 - Disclosed: 2001-05-29

Description:

Multiple BSD operating systems contain a flaw that may allow a remote denial of service. The issue is triggered when a malicious attacker transmits a large number of fragmented IPv4 datagrams to fill the mbuf pool on a target system, which will prevent network traffic processing. This will result in a loss of availability for the platform.

[CLOSE] OSVDB ID : 9541 - Disclosed: 2001-05-29

Description:

board-tnk contains a flaw that may lead to an unauthorized information disclosure. The problem is that the program sets administrator passwords in plaintext in the cookies, which may potentially disclose sensitive information resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 8982 - Disclosed: 2001-05-28

Description:

CesarFTP contains a flaw that allows a remote attacker to access arbitrary files outside of the web path. The issue is due to the program not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the GET command.

[CLOSE] OSVDB ID : 1846 - Disclosed: 2001-05-28

Description:

(Description Provided by CVE) : Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters.

[CLOSE] OSVDB ID : 10161 - Disclosed: 2001-05-28

Description:

TWIG contains a flaw that will allow a remote attacker to inject arbitrary SQL code. The problem is that the id parameter in the schedule.edit.inc.php3 script is not verified properly and will allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 10162 - Disclosed: 2001-05-28

Description:

TWIG Webmail contains a flaw that will allow an attacker to inject arbitrary SQL code. The problem is that the id variable in the "personal.groups.inc.php3" module is not verified properly and will allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 12056 - Disclosed: 2001-05-28

Description:

(Description Provided by CVE) : CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.

[CLOSE] OSVDB ID : 5540 - Disclosed: 2001-05-27

Description:

A remote overflow exists in GuildFTPd. The SITE command fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request to the SITE command containing more than 261 bytes, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 563 - Disclosed: 2001-05-27

Description:

(Description Provided by CVE) : Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attacker to gain sensitive information via a .. (dot dot) in the SHOW parameter.

[CLOSE] OSVDB ID : 13974 - Disclosed: 2001-05-27

Description:

(Description Provided by CVE) : Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the server to consume CPU while preparing alerts.

[CLOSE] OSVDB ID : 13975 - Disclosed: 2001-05-27

Description:

(Description Provided by CVE) : Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.

[CLOSE] OSVDB ID : 11857 - Disclosed: 2001-05-26

Description:

(Description Provided by CVE) : OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).

[CLOSE] OSVDB ID : 11856 - Disclosed: 2001-05-26

Description:

(Description Provided by CVE) : Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.

[CLOSE] OSVDB ID : 13967 - Disclosed: 2001-05-26

Description:

(Description Provided by CVE) : GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.

[CLOSE] OSVDB ID : 13970 - Disclosed: 2001-05-26

Description:

(Description Provided by CVE) : Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service.

[CLOSE] OSVDB ID : 1842 - Disclosed: 2001-05-25

Description:

(Description Provided by CVE) : Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).

[CLOSE] OSVDB ID : 1843 - Disclosed: 2001-05-25

Description:

InoculateIT contains a flaw that allows a malicious local user overwrite arbitrary files on the system. The issue is due to the inocucmd utility using a static file name for a temporary file. If a local user creates a symlink from the static file name (/tmp/ftpdownload.log) to an arbitrary file on the system, InoculateIT will follow the link and overwrite the arbitrary file.

[CLOSE] OSVDB ID : 8846 - Disclosed: 2001-05-24

Description:

Beck's IPC GmbH IPC@Chip Telnet Service contains a flaw that may lead to an unauthorized password exposure. The issue is due to the service not enforcing a limit of consecutive invalid login attempts and delaying the next login prompt, which may allow a remote attacker to more easily conduct brute force attacks against a user's account.

[CLOSE] OSVDB ID : 8847 - Disclosed: 2001-05-24

Description:

Beck's IPC GmbH IPC@Chip Telnet Service contains a flaw that may allow a remote denial of service. The issue is triggered due to the application allowing only one session at a time and failing to disconnect that session after an unsuccessful login, which may allow a remote attacker to connect to the Telnet service indefinitely and prevent access for any other legitimate users resulting in a loss of availability.

[CLOSE] OSVDB ID : 13963 - Disclosed: 2001-05-24

Description:

Beck's IPC GmbH IPC@Chip Web Server contains a flaw that may lead to an unauthorized information disclosure. The issue may allow an attacker to view arbitrary files in the root directory via a direct request, which will disclose potentially sensitive information, such user accounts and passwords, to a remote attacker.

[CLOSE] OSVDB ID : 14266 - Disclosed: 2001-05-24

Description:

It has been reported that Beck's IPC GmbH IPC@Chip Web Server contains a flaw that may allow a remote denial of service. The issue is triggered when the program fails to properly handle overly long HTTP GET requests. This may allow a remote attacker to temporarily cause the server to stop responding, resulting in a loss of availability.

[CLOSE] OSVDB ID : 14267 - Disclosed: 2001-05-24

Description:

Beck IPC GmbH IPC@Chip Telnet Server contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the server sends a different response when provided an invalid versus a valid username, which may allow a remote attacker to enumerate user accounts resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 14268 - Disclosed: 2001-05-24

Description:

Beck IPC GmbH IPC@Chip Web Server contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered by sending a direct request to the the 'chipcfg.cgi' script, which will disclose network configuration settings to a remote attacker resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 19109 - Disclosed: 2001-05-24

Description:

By default, Beck IPC GmbH's IPC@Chip FTP Server installs with a default password of 'anonymous' or 'ftp' which is publicly known and documented. This allows attackers to trivially access the program or system and gain privileged access.

[CLOSE] OSVDB ID : 19110 - Disclosed: 2001-05-24

Description:

By default, Beck's IPC GmbH IPC@Chip Telnet Server installs with a default password of 'tel' which is publicly known and documented. This allows attackers to trivially access the program or system and gain privileged access.

[CLOSE] OSVDB ID : 13437 - Disclosed: 2001-05-24

Description:

(Description Provided by CVE) : Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.

[CLOSE] OSVDB ID : 800 - Disclosed: 2001-05-24

Description:

Cisco IOS contains a flaw that may allow a remote denial of service. The issue is triggered when a port scanner attempts to connect to specific port ranges (100-3999, 5100-5999, 7100-7999 and 10100-10999), and will result in loss of availability for the platform.