CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
3067 | CVE-2001-0246 | Candidate | Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability. | Proposed (20010524) | ACCEPT(5) Baker, Cole, Magdych, Wall, Williams | MODIFY(1) Frech | NOOP(2) Renaud, Ziese | REVIEWING(1) Christey | Christey> See comments for CVE-2001-0332; may need to be merged because | of CD:SF-LOC. | Frech> XF:ie-frame-verification-variant(6748) | View |
8485 | CVE-2004-0057 | Candidate | The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989. | Modified (20100819) | ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | NOOP(1) Christey | Christey> SCO:SCOSA-2004.9 | URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt | View |
7813 | CVE-2003-0989 | Candidate | tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057. | Modified (20100819) | ACCEPT(6) Armstrong, Baker, Cole, Cox, Green, Wall | NOOP(1) Christey | Christey> SCO:SCOSA-2004.9 | URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt | View |
3543 | CVE-2001-0736 | Candidate | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack. | Modified (20040818) | ACCEPT(6) Armstrong, Baker, Cole, Foat, Frech, Wall | NOOP(1) Christey | Christey> Remove version number from REDHAT reference. | Christey> Fix typo: "local users local users" | View |
4064 | CVE-2001-1260 | Candidate | Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot. | Proposed (20020502) | ACCEPT(2) Frech, Green | NOOP(5) Christey, Cole, Cox, Foat, Wall | Christey> Remove extra "the sniffing" phrase. | View |
Page 291 of 20943, showing 5 records out of 104715 total, starting on record 1451, ending on 1455