Notes by Date Updated

• Date UpdatedIDTitle
• 22 Aug 2001VU#704976Aladdin Ghostscript LD_RUN_PATH environment variable allows libraries to be loaded from current directory
• 21 Aug 2001VU#37828Internet Explorer DHTML"Download Behavior" can be tricked into exposing local files
• 21 Aug 2001VU#227312Aladdin Ghostscript creates insecure temporary files allowing a local user to create symbolic links to other files
• 21 Aug 2001VU#960877Red Hat linux restore uses insecure environment variables allowing root compromise
• 21 Aug 2001VU#153653Linux dump uses environment variables insecurely, allowing for root compromise
• 17 Aug 2001VU#435963Microsoft Windows 2000 SMTP service fails to properly authenticate credentials of unauthorized user (MS01-037)
• 17 Aug 2001VU#420475Hewlett-Packard Virtual Vault OS (VVOS) contains vulnerability in mkacct program
• 17 Aug 2001VU#314776Hewlett Packard HP-UX pcltotiff is installed with insecure permissions
• 17 Aug 2001VU#672683Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
• 16 Aug 2001VU#952336Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters