CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3067  CVE-2001-0246  Candidate  Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.  Proposed (20010524)  ACCEPT(5) Baker, Cole, Magdych, Wall, Williams | MODIFY(1) Frech | NOOP(2) Renaud, Ziese | REVIEWING(1) Christey  Christey> See comments for CVE-2001-0332; may need to be merged because | of CD:SF-LOC. | Frech> XF:ie-frame-verification-variant(6748)  View
8485  CVE-2004-0057  Candidate  The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.  Modified (20100819)  ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | NOOP(1) Christey  Christey> SCO:SCOSA-2004.9 | URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt  View
7813  CVE-2003-0989  Candidate  tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.  Modified (20100819)  ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | NOOP(1) Christey  Christey> SCO:SCOSA-2004.9 | URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt  View
3543  CVE-2001-0736  Candidate  Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.  Modified (20040818)  ACCEPT(6) Armstrong, Baker, Cole, Foat, Frech, Wall | NOOP(1) Christey  Christey> Remove version number from REDHAT reference. | Christey> Fix typo: "local users local users"  View
4064  CVE-2001-1260  Candidate  Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.  Proposed (20020502)  ACCEPT(2) Frech, Green | NOOP(5) Christey, Cole, Cox, Foat, Wall  Christey> Remove extra "the sniffing" phrase.  View

Page 291 of 20943, showing 5 records out of 104715 total, starting on record 1451, ending on 1455

Actions