CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
3940 | CVE-2001-1136 | Candidate | The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service. | Proposed (20020315) | ACCEPT(6) Armstrong, Baker, Cole, Frech, Green, Ziese | NOOP(2) Foat, Wall | View | |
4452 | CVE-2002-0058 | Candidate | Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client"s sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. | Proposed (20020315) | ACCEPT(5) Cole, Foat, Green, Wall, Ziese | NOOP(1) Christey | Christey> Consider adding BID:4228 | Christey> XF:java-vm-session-hijacking(8351) | URL:http://www.iss.net/security_center/static/8351.php | HP:HPSBUX0203-186 | URL:http://online.securityfocus.com/advisories/3930 | BID:4228 | URL:http://www.securityfocus.com/bid/4228 | | Need to add "HttpURLConnection" to description (commonly used word) | Christey> ADDREF COMPAQ:SSRT0822 | Christey> COMPAQ:SSRT0822 | Christey> SGI:20020807-01-I | URL:ftp://patches.sgi.com/support/free/security/advisories/20020807-01-I | Christey> BID:4228 | URL:http://www.securityfocus.com/bid/4228 | View |
3941 | CVE-2001-1137 | Candidate | D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments. | Proposed (20020315) | ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese | Green> WITHOUT COMMENT | View |
3942 | CVE-2001-1138 | Candidate | Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter. | Proposed (20020315) | ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese | View | |
3943 | CVE-2001-1139 | Candidate | Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. | Proposed (20020315) | ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese | View |
Page 20775 of 20943, showing 5 records out of 104715 total, starting on record 103871, ending on 103875