Notes by Date Updated

• Date UpdatedIDTitle
• 10 Sep 2001VU#718971Beck GmbH IPC@CHIP HTTPD vulernable to arbitrary file disclosure
• 06 Sep 2001VU#206723Network Associates CSMAP and smap/smapd vulnerable to buffer overflow thereby allowing arbitrary command execution
• 06 Sep 2001VU#952171Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments
• 05 Sep 2001VU#943536ISC InterNetNews (INN) innfeed contains buffer overflow
• 05 Sep 2001VU#123651IBM AIX lsfs utility invokes grep and lslv with relative pathnames
• 04 Sep 2001VU#581603Microsoft Services for UNIX Network File System (NFS) server is vulnerable to denial of service via memory leak
• 31 Aug 2001VU#484011Solaris Line Printer Daemon (in.lpd) vulnerable to buffer overflow via transfer job routine
• 30 Aug 2001VU#310816RIT Research Labs The Bat! does not properly parse characters not followed by a character
• 30 Aug 2001VU#137024Compaq web-enabled management software contains buffer overflow in authentication username
• 30 Aug 2001VU#991240Compaq web-enabled management software acts as generic proxy
• 30 Aug 2001VU#112912Hewlett-Packard MPE/iX linkeditor permits privilege escalation
• 30 Aug 2001VU#396624Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
• 30 Aug 2001VU#446689Check Point FireWall-1 allows fragmented packets through firewall if Fast Mode is enabled
• 30 Aug 2001VU#149424Outlook Web Access (OWA) executes scripts contained in email attachment opened via Microsoft Internet Explorer (IE)
• 27 Aug 2001VU#557136Cayman gateways ship with null administrative and user level passwords
• 27 Aug 2001VU#36312Cayman gateways are vulnerable to a denial of sevices via a long username or password
• 27 Aug 2001VU#312761Cayman gateways are vulnerable to a denial of service via a portscan
• 27 Aug 2001VU#104823Cayman gateways vulnerable to a denial of service via oversized ICMP echo (ping) requests.
• 27 Aug 2001VU#270083IBM VisualAge Professional vulnerable to Cross-Site Scripting via passing of user input directly to default error page
• 23 Aug 2001VU#560659IBM WebSphere vulnerable to Cross-Site Scripting via passing of user input directly to default error page