Latest CVE Feed
-
2.1
LOWCVE-2001-0178
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.... Read more
Affected Products : suse_linux linux mandrake_linux mandrake_linux_corporate_server openlinux_edesktop- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0233
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.... Read more
- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
7.8
HIGHCVE-2001-0195
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.... Read more
Affected Products : debian_linux- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0222
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.... Read more
Affected Products : webmin- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.... Read more
- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2001-0184
eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.... Read more
Affected Products : iris- Published: Mar. 26, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0122
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" ... Read more
- Published: Mar. 13, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1230
Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.... Read more
Affected Products : icecast- Published: Mar. 13, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0120
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2000-0314
traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) option, which is not parsed properly and sets the time delay for sending packets to zero.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0125
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0016
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.... Read more
Affected Products : windows_nt- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
1.2
LOWCVE-2001-0139
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.... Read more
Affected Products : debian_linux linux mandrake_linux openlinux_desktop openlinux_edesktop openlinux_eserver immunix- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2000-0312
cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function.... Read more
Affected Products : openbsd- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0111
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0124
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.... Read more
- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2000-0368
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.... Read more
Affected Products : ios- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-1999-0922
An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.... Read more
Affected Products : coldfusion_server- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-0015
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.... Read more
Affected Products : windows_2000- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2000-0349
Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.... Read more
Affected Products : unixware- Published: Mar. 12, 2001
- Modified: Apr. 03, 2025