Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-1999-1497 7.2 Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts. 2008-09-05 20:19:00
CVE-1999-1475 4.6 ProFTPd 1.2 compiled with the mod_sqlpw module records user passwords in the wtmp log file, which allows local users to obtain the passwords and gain privileges by reading wtmp, e.g. via the last command. 2008-09-05 20:19:00
CVE-1999-1377 5.0 Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. 2008-09-05 20:19:00
CVE-1999-1562 4.6 gFTP FTP client 1.13, and other versions before 2.0.0, records a password in plaintext in (1) the log window, or (2) in a log file. 2008-09-05 20:19:00
CVE-1999-1564 2.1 FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes. 2008-09-05 20:19:00
CVE-1999-1565 4.6 Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. 2008-09-05 20:19:00
CVE-1999-1561 7.2 Nullsoft SHOUTcast server stores the administrative password in plaintext in a configuration file (sc_serv.conf), which could allow a local user to gain administrative privileges on the server. 2008-09-05 20:19:00
CVE-1999-1566 5.0 Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters. 2008-09-05 20:19:00
CVE-1999-1418 5.0 ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote attackers to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist (" 2008-09-05 20:19:00
CVE-1999-1321 7.5 Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary commands via a long DNS hostname that is not properly handled during TGT ticket passing. 2008-09-05 20:19:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/40089
Zapisa po stranici: