Notes by Date Published

• PublishedIDTitle
• 01 Jun 2001VU#396624Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
• 01 Jun 2001VU#112912Hewlett-Packard MPE/iX linkeditor permits privilege escalation
• 30 May 2001VU#32448Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs
• 30 May 2001VU#700216KDE KFM creates temporary files insecurely
• 25 May 2001VU#25701Linux gpm daemon allows arbitrary file removal
• 25 May 2001VU#35085Microsoft Internet Information Server (IIS) discloses contents of files via crafted request for .htr file
• 22 May 2001VU#655248Microsoft Index Server contains buffer overflow
• 21 May 2001VU#22091gpm-root fails to correctly release GID 0 membership for user defined menus
• 17 May 2001VU#982616KDE2 kdesu 'keep password' option does not verify socket listener potentially exposing su password
• 17 May 2001VU#686403ld.so fails to unset LD_PRELOAD before executing suid root programs
• 17 May 2001VU#846832glibc unsetenv fails to properly handle environment variables passed more than once to a program
• 17 May 2001VU#475645Macromedia Flash plug-in contains buffer overflow
• 17 May 2001VU#451096Oliver Debon Flash plug-in vulnerable to buffer overflow processing incorrectly formatted sound file
• 17 May 2001VU#399087Internet Explorer incorrectly validates certificates when CRL checking is enabled
• 17 May 2001VU#145904Microsoft Windows 2000 Kerberos service vulnerable to DoS via repeated invalid requests