Notes by Date Updated

• Date UpdatedIDTitle
• 22 Aug 2001VU#704976Aladdin Ghostscript LD_RUN_PATH environment variable allows libraries to be loaded from current directory
• 21 Aug 2001VU#37828Internet Explorer DHTML"Download Behavior" can be tricked into exposing local files
• 21 Aug 2001VU#227312Aladdin Ghostscript creates insecure temporary files allowing a local user to create symbolic links to other files
• 21 Aug 2001VU#960877Red Hat linux restore uses insecure environment variables allowing root compromise
• 21 Aug 2001VU#153653Linux dump uses environment variables insecurely, allowing for root compromise
• 17 Aug 2001VU#435963Microsoft Windows 2000 SMTP service fails to properly authenticate credentials of unauthorized user (MS01-037)
• 17 Aug 2001VU#420475Hewlett-Packard Virtual Vault OS (VVOS) contains vulnerability in mkacct program
• 17 Aug 2001VU#314776Hewlett Packard HP-UX pcltotiff is installed with insecure permissions
• 17 Aug 2001VU#672683Apache Tomcat vulnerable to Cross-Site Scripting via passing of user input directly to default error page
• 16 Aug 2001VU#952336Microsoft Index Server/Indexing Service used by IIS 4.0/5.0 contains unchecked buffer used when encoding double-byte characters
• 15 Aug 2001VU#620495Oracle 8i contains buffer overflow in TNS Listener
• 15 Aug 2001VU#888283TrendMicro InterScan WebManager contains buffer overflow in RegGo.dll
• 15 Aug 2001VU#570330MS Windows NT Terminal Server 4.0 buffer overflow in regapi.dll allows remote code execution or DoS
• 14 Aug 2001VU#544555Microsoft Internet Information Server 4.0 (IIS) vulnerable to DoS when URL redirecting is enabled
• 10 Aug 2001VU#268848Hewlett Packard HP-UX text editors contain buffer overflow
• 10 Aug 2001VU#266032Microsoft Visual Studio VB-TSQL debugger object vbsdicli.exe contains buffer overflow via NewSPID method
• 10 Aug 2001VU#3062Cenroll ActiveX Control allows creation of arbitrary files.
• 10 Aug 2001VU#26188Keys generated with PGP5i batch mode do not contain sufficient randomness on systems that use /dev/random
• 10 Aug 2001VU#17215SGI systems may execute commands embedded in mail messages
• 08 Aug 2001VU#715973ISC BIND 8.2.2-P6 vulnerable to DoS via compressed zone transfer, aka the "zxfr bug"