CVE-2000-0575

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS...

CVE-2001-1020

Vulnerability CVE-2001-1020 affects Vibechild Directory Manager prior to 0.91, where edit_image.php passes userfile_name unfiltered to PHP passthru, enabling remote command execution via shell metacharacters. OpenVAS entries describe an arbitrary command execution risk; NVD/NVL references list a ...

CVE-2001-0851

CVE-2001-0851 covers the Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled. The issue arises from the syncookie handling that allows a remote attacker to bypass firewall rules by brute-forcing the cookie, effectively defeating first-hop filtering. Public advisories from Red Hat, SUSE, Mandrak...

CVE-1999-0968

CVE-1999-0968 describes a buffer overflow in the BNC IRC proxy that allows remote attackers to gain privileges. The affected component is the BNC IRC proxy; the underlying cause is a buffer overflow vulnerability. The initial sources do not provide version-specific details, exploit vectors, explo...

CVE-2001-0493

The CVE describes a denial-of-service in Small HTTP Server 2.03 when handling HTTP requests that contain MS-DOS device names (for example AUX) in the URL. The underlying cause is improper handling of device-name paths, allowing a remote attacker to crash or freeze the server (Windows 98 reference...

CVE-1999-1326

wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR abort file transfer command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files...

CVE-1999-1379

CVE-1999-1379 concerns DNS reflection via UDP queries where an attacker spoofs the source address to use DNS name servers as traffic amplifiers, causing amplified traffic toward the victim. The description in the connected records confirms that open resolvers can be abused to generate more traffi...

CVE-2002-0013

CVE-2002-0013 concerns numerous SNMPv1 implementation flaws that allow remote DoS or privilege escalation via SNMP GetRequest, GetNextRequest, and SetRequest messages, demonstrated by the PROTOS c06-SNMPv1 test suite. The vulnerability is described across multiple advisories and vendors (e.g., AR...

[SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability]

SUPERPETZ ADVISORY 002- Faq-O-Matic Cross-Site Scripting Vulnerability // + : : ++ :o:+++ -/++ / / collect them all! this one is a lynx!! TITLE: Faq-O-Matic Cross-Site Scripting Vulnerability ----- discovery date: February 1st, 2002 -------------- publication date: February 4th, 2002...

CVE-2001-1040

CVE-2001-1040 affects HP LaserJet and possibly other JetDirect devices, where certain power-off behavior resets the admin password. The result is that a remote attacker could gain administrative access without a password after the device is turned off, per the available description. The provided ...

CVE-2001-0924

CVE-2001-0924 describes a directory traversal vulnerability in the Informix SQL Web DataBlade CGI (LO parameter) that allows remote attackers to read arbitrary files on the affected system. The issue arises from improper handling of the .. (dot dot) path traversal in the LO parameter of the ifx C...

CVE-2001-0970

The CVE-2001-0970 vulnerability affects TDForum 1.2 (tdforum12.cgi) where input is not properly filtered, enabling cross-site scripting by malicious forum posts. CERT/CC notes TDForum 1.2 and earlier do not properly filter HTML/script tags, with no practical vendor patch available (as of the sour...

CVE-2001-0958

CVE-2001-0958 affects Trend Micro InterScan eManager for NT Ver.3.51 (English) and NT Ver.3.51J. The vulnerability is a remotely exploitable buffer overflow in the eManager CGI interface, caused by long arguments to multiple DLLs (register.dll, ContentFilter.dll, SFNofitication.dll, TOP10.dll, Sp...

CVE-2001-1050

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable...

CVE-2001-0911

CVE-2001-0911 affects PHP-Nuke 5.1, where user and administrator passwords are stored in a base-64 encoded cookie. This could allow remote attackers to gain privileges by stealing/sniffing the cookie and decoding it. The connected sources corroborate the cookie-based credential exposure, but no p...

CVE-2001-0945

CVE-2001-0945 describes a buffer overflow in Outlook Express 5.0–5.02 for Macintosh triggered by an email message containing a long line, allowing remote attackers to cause a denial of service. The underlying issue is a buffer overflow in handling long lines; impact is a denial of service with pa...

CVE-2001-0947

The CVE-2001-0947 issue affects ValiCert Enterprise Validation Authority (EVA) versions 3.3 through 4.2.1. It allows remote attackers to determine the server’s real pathname by requesting an invalid extension, which causes an error page that reveals the path. The vulnerability is a server-path di...

CVE-2002-0047

CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service crash via a short malformed packet...

CVE-2001-1516

Cross-site scripting XSS vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews...

CVE-2001-0745

Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property...