kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges. Date published : 2001-05-24 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3 http://www.redhat.com/support/errata/RHSA-2001-059.html
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3. Date published : 2001-05-24 http://www.securityfocus.com/bid/2650...
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) …. in CWD, (2) .. in NLST, or...
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. Date published : 2001-05-24 http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the...
Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set. Date published : 2001-05-24 http://www.securityfocus.com/bid/2517...
Directory traversal vulnerability in Alex’s FTP Server 0.7 allows remote attackers to read arbitrary files via a … (modified dot dot) in the (1) GET or (2) CD commands. Date published : 2001-05-24 http://www.securityfocus.com/bid/2668...
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. Date published : 2001-05-24 http://www.securityfocus.com/bid/2640 http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script. Date published : 2001-05-24 http://www.securityfocus.com/bid/2642 http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html
Vulnerability in WebCalendar 0.9.26 allows remote command execution. Date published : 2001-05-24 http://www.securityfocus.com/bid/2639 http://archives.neohapsis.com/archives/bugtraq/2001-04/0392.html
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter. Date...
Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request. Date published : 2001-05-24 http://archives.neohapsis.com/archives/bugtraq/2001-03/0243.html https://exchange.xforce.ibmcloud.com/vulnerabilities/6250
SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack. Date published...
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name. Date published : 2001-05-24 http://archives.neohapsis.com/archives/bugtraq/2001-03/0160.html http://archives.neohapsis.com/archives/bugtraq/2001-03/0181.html