CVE-2001-0081: Undefined Security Weakness

swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys...

Remote vulnerability in gnuserv/XEmacs

SUMMARY All currently available versions of gnuserv for unix prior to 3.12 are vulnerable to remote exploit due to a buffer overflow and weak security. Gnuserv is a remote control facility for Emacsen. Gnuserv ships with XEmacs but is also available stand-alone from various sources for use with G...

CVE-2001-0101: Undefined Security Weakness

Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command...

CVE-2000-0528: Undefined Security Weakness

Net Tools PKI Server does not properly restrict access to remote attackers when the XUDA template files do not contain absolute pathnames for other files...

CVE-2000-0792: Undefined Security Weakness

Gnome Lokkit firewall package before 0.41 does not properly restrict access to some ports, even if a user does not make any services available...

CVE-2000-0225: Undefined Security Weakness

The Pocsag POC32 program does not properly prevent remote users from accessing its server port, even if the option has been disabled...

CVE-2000-0793: Undefined Security Weakness

Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the system...

CVE-2000-0379: Undefined Security Weakness

The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if the administrator has configured it to do so...

CVE-1999-0142: Undefined Security Weakness

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

CVE-1999-0819: Undefined Security Weakness

NTMail does not disable the VRFY command, even if the administrator has explicitly disabled it...

CVE-2000-0364: Undefined Security Weakness

screen and rxvt in Red Hat Linux 6.0 do not properly set the modes of tty devices, which allows local users to write to other ttys...

CVE-1999-0895: Undefined Security Weakness

Firewall-1 does not properly restrict access to LDAP attributes...

CVE-1999-0903: Undefined Security Weakness

genfilt in the AIX Packet Filtering Module does not properly filter traffic to destination ports greater than 32767...

CVE-1999-0189: Undefined Security Weakness

Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111...

CVE-1999-0548: Undefined Security Weakness

A superfluous NFS server is running, but it is not importing or exporting any file systems...

CVE-1999-0852: Undefined Security Weakness

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin...

CVE-1999-0528: Undefined Security Weakness

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of...

CVE-1999-0535: Undefined Security Weakness

A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness...

CVE-1999-0561: Undefined Security Weakness

IIS has the exec function enabled for Server Side Include SSI files...

CVE-1999-0583: Undefined Security Weakness

There is a one-way or two-way trust relationship between Windows NT domains...