CVE List

Id CVE No. Status Description Phase Votes Comments Actions
4021  CVE-2001-1217  Candidate  Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.  Proposed (20020315)  ACCEPT(6) Cole, Foat, Frech, Green, Wall, Ziese | NOOP(1) Christey  Christey> CERT:CA-2002-08  View
4022  CVE-2001-1218  Candidate  Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.  Proposed (20020315)  ACCEPT(1) Green | MODIFY(1) Frech | NOOP(4) Cole, Foat, Wall, Ziese  Green> From scanning MS-TechNet there are sufficient similar conundrums | between Solaris and IE to assume that this rings true | Frech> XF:ie-unix-chinchar-dos(9121)  View
4023  CVE-2001-1219  Candidate  Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.  Proposed (20020315)  ACCEPT(1) Green | MODIFY(1) Frech | NOOP(2) Cole, Foat | REJECT(1) Ziese | REVIEWING(1) Wall  Frech> XF:ie-javascript-selflocation-dos(9122)  View
4535  CVE-2002-0141  Candidate  Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(3) Cole, Foat, Wall    View
4024  CVE-2001-1220  Candidate  D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(4) Cole, Foat, Wall, Ziese    View

Page 20788 of 20943, showing 5 records out of 104715 total, starting on record 103936, ending on 103940

Actions