CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 2615 | CVE-2000-1046 | Candidate | Multiple buffer overflows in the ESMTP service of Lotus Domino 5.0.2c and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via long (1) "RCPT TO," (2) "SAML FROM," or (3) "SOML FROM" commands. | Modified (20040723) | ACCEPT(2) Baker, Mell | MODIFY(1) Collins | NOOP(2) Cole, Wall | Collins> http://www.synnergy.net/downloads/advisories/SLA-2000-07.typsoft-ftpd.txt | Baker> Reference by Collins was entered into the wrong CAN Entry... | It should have been for 2000-1035, not this CAN | CHANGE> [Baker changed vote from REVIEWING to ACCEPT] | View |
| 3394 | CVE-2001-0581 | Candidate | Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387. | Modified (20040723) | ACCEPT(3) Cole, Frech, Ziese | NOOP(3) Bishop, Foat, Wall | REVIEWING(1) Christey | CHANGE> [Bishop changed vote from REVIEWING to NOOP] | Christey> A followup claims that if the server runs on Windows 9x, that | Windows 9x can"t handle more than 100 sockets at once, which | may be triggering the bug as opposed to the software. | CHANGE> [Christey changed vote from NOOP to REVIEWING] | View |
| 1351 | CVE-1999-1371 | Candidate | Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument. | Modified (20040723) | ACCEPT(2) Cole, Dik | MODIFY(1) Frech | NOOP(3) Christey, Foat, Wall | Frech> XF:solaris-write-bo(7546) | Christey> This appears to be a rediscovery of the problem for Solaris | 2.8: | BUGTRAQ:20011114 /usr/bin/write (solaris2.x) Segmentation Fault | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=100588255815773&w=2 | Dik> sun bug: 4218941 | View |
| 5202 | CVE-2002-0812 | Candidate | Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string. | Modified (20040725) | ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(6) Armstrong, Christey, Cole, Cox, Foat, Wall | Christey> VULNWATCH:20020813 Foundstone Labs Advisory - Information Leakage in Orinoco and Compaq Access Points [updated] | URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.html | XF:orinoco-rg-default-snmp(9810) | URL:http://www.iss.net/security_center/static/9810.php | BID:5436 | URL:http://www.securityfocus.com/bid/5436 | Frech> XF:orinoco-rg-default-snmp(9810) | View |
| 4752 | CVE-2002-0360 | Candidate | Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program. | Modified (20040725) | ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(6) Armstrong, Christey, Cole, Cox, Foat, Wall | Christey> XF:sun-answerbook2-gettransbitmap-bo(9117) | URL:http://www.iss.net/security_center/static/9117.php | BID:4784 | URL:http://www.securityfocus.com/bid/4784 | Frech> XF:sun-answerbook2-gettransbitmap-bo(9117) | View |
Page 20400 of 20943, showing 5 records out of 104715 total, starting on record 101996, ending on 102000
