CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 4185 | CVE-2001-1382 | Entry | The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used. | View | |||
| 4184 | CVE-2001-1380 | Entry | OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses. | View | |||
| 4183 | CVE-2001-1379 | Candidate | The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name. | Proposed (20020726) | ACCEPT(4) Armstrong, Baker, Cole, Cox | NOOP(2) Foat, Wall | View | |
| 4182 | CVE-2001-1378 | Entry | fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. | View | |||
| 4181 | CVE-2001-1377 | Candidate | Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2. | Proposed (20020611) | ACCEPT(5) Alderson, Cole, Cox, Frech, Green | NOOP(2) Foat, Wall | View |
Page 20107 of 20943, showing 5 records out of 104715 total, starting on record 100531, ending on 100535
