CVE List

Id CVE No. Status Description Phase Votes Comments Actions
60292  CVE-2013-0345  Candidate  varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local users to obtain sensitive information by reading the files. NOTE: some of these details are obtained from third party information.  Assigned (20121206)  None (candidate not yet proposed)    View
92  CVE-1999-0092  Candidate  Various vulnerabilities in the AIX portmir command allows local users to obtain root access.  Proposed (19990623)  ACCEPT(2) Baker, Bollinger | MODIFY(1) Frech | NOOP(1) Ozancin  Frech> XF:ibm-portmir  View
2608  CVE-2000-1039  Candidate  Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.  Proposed (20001219)  ACCEPT(3) Baker, Cole, Renaud | MODIFY(1) Frech | NOOP(2) Magdych, Wall | REVIEWING(1) Christey  Baker> Although this is at a high level, the fact is that it is a vulnerability, and as such we need to recognize this, even if we have to recast or modify the description at some later time. | Christey> This needs to be commented on and reviewed by many Board | members. | Frech> XF:naptha-resource-starvation(5810) | Christey> ADDREF SGI:20020304-01-A | Christey> SGI:20020304-01-A  View
7810  CVE-2003-0986  Candidate  Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the copy_from_user function when copying data from userspace to kernelspace, which crosses security boundaries and allows local users to cause a denial of service.  Assigned (20031216)  None (candidate not yet proposed)    View
7261  CVE-2003-0434  Candidate  Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to execute arbitrary commands via shell metacharacters in an embedded hyperlink.  Assigned (20030616)  None (candidate not yet proposed)    View

Page 569 of 20943, showing 5 records out of 104715 total, starting on record 2841, ending on 2845

Actions