Vulnerabilities
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2001-07-17 | CVE-2001-1279 | Buffer Overflow vulnerability in LBL Tcpdump 3.6.2 Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026. | 7.5 |
2001-07-17 | CVE-2001-1242 | Directory Traversal vulnerability in Steve Grimm Un-CGI Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. | 7.5 |
2001-07-17 | CVE-2001-1241 | Unspecified vulnerability in Steve Grimm Un-Cgi Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name. | 7.5 |
2001-07-17 | CVE-2001-1182 | Local Security vulnerability in HP-Ux 10.20/11.00/11.11 Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. | 7.2 |
2001-07-17 | CVE-2001-1179 | Local Security vulnerability in Xfree86 Project X11R6 3.3.2 xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters. | 7.2 |
2001-07-17 | CVE-2001-1177 | Unspecified vulnerability in Samsung Ml-85G GDI Printer Driver and Ml-85P Printer Driver ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 6.2 |
2001-07-17 | CVE-2001-0980 | Unspecified vulnerability in Caldera Openlinux Server and Openlinux Workstation docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page. | 7.5 |
2001-07-17 | CVE-2001-0974 | Unspecified vulnerability in Oracle Internet Directory 2.1.1/3.0.1 Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite. | 7.5 |
2001-07-17 | CVE-1999-1569 | Denial of Service vulnerability in ID Software Quake 1.9 Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit. | 5.0 |
2001-07-16 | CVE-2001-1321 | Denial-Of-Service vulnerability in Internet Directory 2.1.1/3.0.1 Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. | 7.5 |