Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2001-07-17 CVE-2001-1279 Buffer Overflow vulnerability in LBL Tcpdump 3.6.2
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
network
low complexity
lbl
7.5
2001-07-17 CVE-2001-1242 Directory Traversal vulnerability in Steve Grimm Un-CGI
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a ..
network
low complexity
steve-grimm
7.5
2001-07-17 CVE-2001-1241 Unspecified vulnerability in Steve Grimm Un-Cgi
Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!" and the desired program name.
network
low complexity
steve-grimm
7.5
2001-07-17 CVE-2001-1182 Local Security vulnerability in HP-Ux 10.20/11.00/11.11
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
local
low complexity
hp
7.2
2001-07-17 CVE-2001-1179 Local Security vulnerability in Xfree86 Project X11R6 3.3.2
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
local
low complexity
xfree86-project
7.2
2001-07-17 CVE-2001-1177 Unspecified vulnerability in Samsung Ml-85G GDI Printer Driver and Ml-85P Printer Driver
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
local
high complexity
samsung
6.2
2001-07-17 CVE-2001-0980 Unspecified vulnerability in Caldera Openlinux Server and Openlinux Workstation
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
network
low complexity
caldera
7.5
2001-07-17 CVE-2001-0974 Unspecified vulnerability in Oracle Internet Directory 2.1.1/3.0.1
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
network
low complexity
oracle
7.5
2001-07-17 CVE-1999-1569 Denial of Service vulnerability in ID Software Quake 1.9
Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
network
low complexity
id-software
5.0
2001-07-16 CVE-2001-1321 Denial-Of-Service vulnerability in Internet Directory 2.1.1/3.0.1
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
network
low complexity
oracle
7.5