CVE-2001-0746

The CVE-2001-0746 issue is a buffer overflow in the Web Publisher component of iPlanet Web Server Enterprise Edition 4.1 and earlier. An attacker can trigger this by sending a long URI in requests for certain methods (notably GETPROPERTIES and GETATTRIBUTENAMES), potentially causing a denial of s...

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute...

CVE-2001-0164

The CVE-2001-0164 issue affects Netscape Directory Server versions 4.12 and earlier, with a buffer overflow triggered by a specially crafted request in the recipient field. The Security Advisory (SECURITYVULNS/DOC:1363) confirms the exposure in Directory Server 4.11/4.12 and notes that artifacts ...

CVE-2001-0245

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...

CVE-2001-0402

IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port...

CVE-2001-0245

Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...

CVE-1999-1153

CVE-1999-1153 affects HAMcards Postcard CGI script 1.0. The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the recipient email address, enabling potentially partial confidentiality, integrity, and availability impact. The CVSS score (2.0) ...

CVE-1999-0808

Multiple buffer overflows in ISC DHCP Distribution server dhcpd 1.0 and 2.0 allow a remote attacker to cause a denial of service crash and possibly execute arbitrary commands via long options...

CVE-1999-1086

CVE-1999-1086 affects Novell NetWare 5 and earlier when running over IPX with a packet signature level

CVE-1999-1421

CVE-1999-1421 affects NBase switches NH208 and NH215 that run a TFTP server. The vulnerability arises from the TFTP service allowing remote attackers to influence software updates by guessing default target filenames, enabling modification of the switch or triggering a denial-of-service (crash). ...

CVE-1999-1255

CVE-1999-1255 affects Hyperseek. The vulnerability allows a remote attacker to modify the Hyperseek configuration by directly invoking the admin.cgi program with an edit_file action parameter. Per the records, this is a network-exposed issue with no authentication required, enabling an integrity ...

CVE-1999-1164

Microsoft Outlook client is affected by CVE-1999-1164, where processing multiple email messages with identical X-UIDL headers can cause the application to hang, resulting in a denial of service. The available documents confirm the DoS impact but do not provide concrete remediation steps or patche...

CVE-1999-1065

Palm Pilot HotSync Manager 3.0.4 on Windows 98 is affected. A remote attacker can cause a denial of service—and possibly execute arbitrary commands—by sending a long string to port 14238 while the manager is in network mode. No root cause, exploit specifics, or remediation details are provided in...

CVE-1999-1377

The CVE-1999-1377 entry concerns Matt Wright’s download.cgi 1.0. The vulnerability arises from a pathname traversal flaw: remote attackers can read arbitrary files by supplying a .. (dot dot) sequence in the f parameter. This indicates a breach of confidentiality via improper input handling in th...

CVE-1999-1257

Xyplex terminal server 6.0.1S1 (and possibly other versions) is affected by an authentication bypass vulnerability. Remote attackers can bypass the password prompt by entering either a CTRL-Z character or a question mark (?), as described in CVE-1999-1257. The available documents confirm the affe...

CVE-1999-1445

Vulnerability in imapd and ipop3d in Slackware 3.4 and 3.3 with shadowing enabled, and possibly other operating systems, allows remote attackers to cause a core dump via a short sequence of USER and PASS commands that do not provide valid usernames or passwords...

CVE-1999-1206

The CVE-1999-1206 issue concerns SystemSoft SystemWizard on HP Pavilion PCs running Windows 98, where two ActiveX controls (LaunchCtrl and RegistryAccess) marked as safe-for-scripting can be used by a malicious web page to execute arbitrary commands. The vulnerabilities are tied to the Registry O...

CVE-1999-1267

CVE-1999-1267 concerns the KDE file manager (kfm), which exposes a TCP server for certain file operations. According to the description and linked records, a remote attacker can modify arbitrary files by sending a copy command to this server. The vulnerability is categorized with a NVD base score...

CVE-1999-1485

The CVE-1999-1485 issue concerns the nsd service in IRIX 6.5 through 6.5.2, which exports a virtual filesystem on a UDP port. According to the provided documents, this allows remote attackers to view files and can cause a possible denial of service by mounting the nsd virtual filesystem. The sour...

CVE-2001-0994

Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input e.g., from a port scanner, which prevents others from logging into the device...