Notes by Date Published

• PublishedIDTitle
• 15 Jun 2001VU#264272Microsoft Internet Information Server (IIS) discloses contents of files via crafted request containing "%3F+.htr"
• 15 Jun 2001VU#28565Microsoft Internet Information Server (IIS) discloses contents of files via crafted request containing "+.htr"
• 13 Jun 2001VU#850440SSH1 may generate weak passphrase when using Secure RPC
• 13 Jun 2001VU#167464Robtex Viking Web Server permits traversal out of HTTP docs root directory
• 13 Jun 2001VU#303080AT&T WinVNC client authentication process vulnerable to man-in-the-middle attack
• 08 Jun 2001VU#426456gpm creates temporary files insecurely
• 07 Jun 2001VU#988768Microsoft Internet Explorer (IE) permits modification of URL displayed in address bar
• 04 Jun 2001VU#197477AT&T WinVNC allows user access to passwords and configuration via weak registry permissions
• 01 Jun 2001VU#310816RIT Research Labs The Bat! does not properly parse characters not followed by a character
• 01 Jun 2001VU#396624Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
• 01 Jun 2001VU#112912Hewlett-Packard MPE/iX linkeditor permits privilege escalation
• 30 May 2001VU#32448Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs
• 30 May 2001VU#700216KDE KFM creates temporary files insecurely
• 25 May 2001VU#25701Linux gpm daemon allows arbitrary file removal
• 25 May 2001VU#35085Microsoft Internet Information Server (IIS) discloses contents of files via crafted request for .htr file