CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
6037 | CVE-2002-1653 | Candidate | Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information. | Assigned (20050329) | None (candidate not yet proposed) | View | |
6038 | CVE-2002-1654 | Candidate | iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. | Assigned (20050329) | None (candidate not yet proposed) | View | |
6039 | CVE-2002-1655 | Candidate | The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. | Assigned (20050329) | None (candidate not yet proposed) | View | |
6040 | CVE-2002-1656 | Candidate | X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie. | Assigned (20050329) | None (candidate not yet proposed) | View | |
10200 | CVE-2004-1772 | Candidate | Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument. | Assigned (20050329) | None (candidate not yet proposed) | View |
Page 19601 of 20943, showing 5 records out of 104715 total, starting on record 98001, ending on 98005