CVE List

Id CVE No. Status Description Phase Votes Comments Actions
6037  CVE-2002-1653  Candidate  Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.  Assigned (20050329)  None (candidate not yet proposed)    View
6038  CVE-2002-1654  Candidate  iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.  Assigned (20050329)  None (candidate not yet proposed)    View
6039  CVE-2002-1655  Candidate  The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.  Assigned (20050329)  None (candidate not yet proposed)    View
6040  CVE-2002-1656  Candidate  X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.  Assigned (20050329)  None (candidate not yet proposed)    View
10200  CVE-2004-1772  Candidate  Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.  Assigned (20050329)  None (candidate not yet proposed)    View

Page 19601 of 20943, showing 5 records out of 104715 total, starting on record 98001, ending on 98005

Actions