Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2001-1271 2.1 Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames. 2008-09-05 20:26:00
CVE-2001-1270 2.1 Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files. 2008-09-05 20:26:00
CVE-2001-1267 2.1 Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot). 2008-09-05 20:26:00
CVE-2001-1240 10.0 The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access. 2008-09-05 20:26:00
CVE-2001-1245 5.0 Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name. 2008-09-05 20:26:00
CVE-2001-1266 5.0 Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'. 2008-09-05 20:26:00
CVE-2001-1330 7.2 Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument. 2008-09-05 20:26:00
CVE-2001-1326 7.5 Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the atta 2008-09-05 20:26:00
CVE-2001-1349 3.7 Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers. 2008-09-05 20:26:00
CVE-2001-1348 7.5 TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter. 2008-09-05 20:26:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39953
Zapisa po stranici: