OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
Max CVSS
7.5
EPSS Score
0.20%
Published
2001-06-19
Updated
2017-07-11
Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.
Max CVSS
7.5
EPSS Score
2.26%
Published
2001-06-11
Updated
2017-07-11
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.
Max CVSS
5.0
EPSS Score
0.11%
Published
2001-06-11
Updated
2017-12-19
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
Max CVSS
10.0
EPSS Score
0.75%
Published
2001-06-08
Updated
2017-10-10
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-06-05
Updated
2017-10-10
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
Max CVSS
7.5
EPSS Score
2.51%
Published
2001-06-12
Updated
2017-12-19
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
Max CVSS
7.5
EPSS Score
2.97%
Published
2001-06-12
Updated
2017-12-19
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2001-06-11
Updated
2008-09-05
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2001-06-11
Updated
2017-04-29
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
Max CVSS
7.5
EPSS Score
3.39%
Published
2001-06-22
Updated
2017-10-10
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-06-26
Updated
2008-09-10
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
Max CVSS
5.0
EPSS Score
1.87%
Published
2001-06-28
Updated
2017-12-19
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
Max CVSS
2.1
EPSS Score
0.05%
Published
2001-06-11
Updated
2016-10-18
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
Max CVSS
1.2
EPSS Score
0.04%
Published
2001-06-21
Updated
2016-10-18
telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.
Max CVSS
5.0
EPSS Score
3.35%
Published
2001-06-06
Updated
2017-12-19
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.
Max CVSS
1.2
EPSS Score
0.04%
Published
2001-06-11
Updated
2017-12-19
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
Max CVSS
5.0
EPSS Score
1.12%
Published
2001-06-29
Updated
2008-09-10
vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.
Max CVSS
5.0
EPSS Score
1.12%
Published
2001-06-29
Updated
2008-09-10
vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
Max CVSS
5.0
EPSS Score
0.29%
Published
2001-06-29
Updated
2008-09-10
vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).
Max CVSS
5.0
EPSS Score
0.80%
Published
2001-06-29
Updated
2008-09-10
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.
Max CVSS
7.5
EPSS Score
6.36%
Published
2001-06-30
Updated
2008-09-10
PowerNet IX allows remote attackers to cause a denial of service via a port scan.
Max CVSS
5.0
EPSS Score
0.27%
Published
2001-06-29
Updated
2008-09-10
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
Max CVSS
7.2
EPSS Score
0.04%
Published
2001-06-27
Updated
2008-09-05
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
Max CVSS
10.0
EPSS Score
1.04%
Published
2001-06-16
Updated
2008-09-05
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
Max CVSS
10.0
EPSS Score
1.93%
Published
2001-06-23
Updated
2017-10-10
211 vulnerabilities found
1 2 3 4 5 6 7 8 9
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!