CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3283  CVE-2001-0466  Candidate  Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.  Proposed (20010524)  MODIFY(1) Frech | NOOP(3) Cole, Wall, Ziese  Frech> XF:ustorekeeper-retrieve-files(6319)  View
3075  CVE-2001-0254  Candidate  FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.  Proposed (20010404)  MODIFY(1) Frech | NOOP(3) Cole, Wall, Ziese | REVIEWING(1) Bishop  Frech> XF:fastream-ftp-path-disclosure(5977)  View
3092  CVE-2001-0271  Candidate  mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.  Modified (20070307)  MODIFY(1) Frech | NOOP(3) Cole, Wall, Ziese | REVIEWING(1) Bishop  Frech> XF:http-cgi-mailnews-username(6139)  View
3094  CVE-2001-0273  Candidate  pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.  Modified (20050509)  MODIFY(1) Frech | NOOP(3) Cole, Wall, Ziese | REVIEWING(1) Bishop  Frech> XF:pgp4pine-expired-keys(6135)  View
3096  CVE-2001-0275  Candidate  Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.  Proposed (20010404)  MODIFY(1) Frech | NOOP(3) Cole, Wall, Ziese | REVIEWING(1) Bishop  Frech> XF:moby-netsuite-bo(6132)  View

Page 1129 of 20943, showing 5 records out of 104715 total, starting on record 5641, ending on 5645

Actions