CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
4065 | CVE-2001-1261 | Candidate | Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server"s response to a TFTP broadcast and providing an alternate HoldMusic file. | Proposed (20020502) | ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall | View | |
4064 | CVE-2001-1260 | Candidate | Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot. | Proposed (20020502) | ACCEPT(2) Frech, Green | NOOP(5) Christey, Cole, Cox, Foat, Wall | Christey> Remove extra "the sniffing" phrase. | View |
4063 | CVE-2001-1259 | Candidate | Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload. | Proposed (20020502) | ACCEPT(2) Frech, Green | NOOP(4) Cole, Cox, Foat, Wall | View | |
4062 | CVE-2001-1258 | Candidate | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server. | Proposed (20020502) | ACCEPT(4) Cole, Cox, Frech, Green | NOOP(2) Foat, Wall | Cox> VERIFYING. | CHANGE> [Cox changed vote from REVIEWING to ACCEPT] | View |
4061 | CVE-2001-1257 | Candidate | Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email. | Proposed (20020502) | ACCEPT(4) Cole, Cox, Frech, Green | NOOP(2) Foat, Wall | CHANGE> [Cox changed vote from REVIEWING to ACCEPT] | View |
Page 20131 of 20943, showing 5 records out of 104715 total, starting on record 100651, ending on 100655