Latest CVE Feed
-
7.5
HIGHCVE-2001-1315
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1306
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : iplanet_directory_server- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1307
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : iplanet_directory_server- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1181
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.... Read more
Affected Products : hp-ux- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1314
Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0975
Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : internet_directory- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1308
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : iplanet_directory_server- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1309
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : secureway_directory- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1320
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : keyserver- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1317
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : teamware_office- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1319
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : exchange_server- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1312
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.... Read more
Affected Products : lotus_domino_r5- Published: Jul. 16, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1053
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.... Read more
Affected Products : adcycle- Published: Jul. 13, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1082
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.... Read more
- Published: Jul. 13, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1176
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.... Read more
- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1269
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.... Read more
Affected Products : unzip- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1271
Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.... Read more
Affected Products : rar- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1270
Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.... Read more
Affected Products : pkzip- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1268
Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.... Read more
Affected Products : unzip- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1142
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.... Read more
Affected Products : ftp_server- Published: Jul. 12, 2001
- Modified: Apr. 03, 2025