Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2000-1105 4.3 The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled. 2008-09-05 20:22:00
CVE-2000-1103 7.2 rcvtty in BSD 3.0 and 4.0 does not properly drop privileges before executing a script, which allows local attackers to gain privileges by specifying an alternate Trojan horse script on the command line. 2008-09-05 20:22:00
CVE-2000-1102 5.0 PTlink IRCD 3.5.3 and PTlink Services 1.8.1 allow remote attackers to cause a denial of service (server crash) via "mode +owgscfxeb" and "oper" commands. 2008-09-05 20:22:00
CVE-2000-1101 5.0 Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a variation of the .. (dot dot) attack. 2008-09-05 20:22:00
CVE-2000-1100 7.5 The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive information such as database usernames and passwords via a direct HTTP GET 2008-09-05 20:22:00
CVE-2000-1098 5.0 The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. 2008-09-05 20:22:00
CVE-2000-1037 7.5 Check Point Firewall-1 session agent 3.0 through 4.1 generates different error messages for invalid user names versus invalid passwords, which allows remote attackers to determine valid usernames and guess a password via a brute force attack. 2008-09-05 20:22:00
CVE-2000-1017 5.0 Webteachers Webdata allows remote attackers with valid Webdata accounts to read arbitrary files by posting a request to import the file into the WebData database. 2008-09-05 20:22:00
CVE-2000-1012 7.2 The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable. 2008-09-05 20:22:00
CVE-2000-0999 10.0 Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges. 2008-09-05 20:22:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40089
Zapisa po stranici: