CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
1583 | CVE-2000-0005 | Candidate | HP-UX aserver program allows local users to gain privileges via a symlink attack. | Modified (20090302) | ACCEPT(3) Armstrong, Baker, Stracener | MODIFY(1) Frech | RECAST(1) Christey | REVIEWING(1) Levy | Christey> BUGTRAQ:20000102 "HPUX Aserver revisited." indicates that two | different versions of aserver have symlink problems, but with | different files. So CD:SF-LOC says we should split this. | Frech> XF:hp-aserver | Christey> BID:1928 and BID:1930? Which one is being described in | this candidate? | Christey> BID:1930 | View |
1427 | CVE-1999-1447 | Candidate | Internet Explorer 4.0 allows remote attackers to cause a denial of service (crash) via HTML code that contains a long CLASSID parameter in an OBJECT tag. | Modified (20020218-01) | ACCEPT(2) Cole, Wall | NOOP(2) Christey, Foat | Christey> BUGTRAQ:19980730 Re: Object tag crashes Internet Explorer 4.0 | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=90221104526188&w=2 | View |
318 | CVE-1999-0319 | Candidate | Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting. | Proposed (19990623) | ACCEPT(3) Frech, Hill, Northcutt | NOOP(2) Baker, Prosser | REVIEWING(1) Christey | Christey> BUGTRAQ:19961126 Security Problems in XMCD 2.1 | A followup to this post says that xmcd is not suid here. | View |
7643 | CVE-2003-0819 | Candidate | Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol. | Modified (20071113) | ACCEPT(4) Armstrong, Baker, Cole, Wall | NOOP(2) Christey, Cox | Christey> BID:9406 | URL:http://www.securityfocus.com/bid/9406 | View |
6886 | CVE-2003-0057 | Candidate | Multiple buffer overflows in Hypermail 2 before 2.1.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code (1) via a long attachment filename that is not properly handled by the hypermail executable, or (2) by connecting to the mail CGI program from an IP address that reverse-resolves to a long hostname. | Modified (20071113) | ACCEPT(3) Baker, Cole, Green | NOOP(3) Christey, Cox, Wall | Christey> BID:6689 | BID:6690 | DEBIAN:DSA-248 | SUSE:SuSE-SA:2003:012 | View |
Page 327 of 20943, showing 5 records out of 104715 total, starting on record 1631, ending on 1635