CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3756  CVE-2001-0950  Candidate  ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.  Proposed (20020131)  ACCEPT(4) Baker, Cole, Frech, Green | NOOP(2) Foat, Wall    View
3757  CVE-2001-0951  Entry  Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.        View
3758  CVE-2001-0952  Candidate  THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.  Proposed (20020131)  ACCEPT(2) Frech, Green | NOOP(3) Cole, Foat, Wall    View
3759  CVE-2001-0953  Candidate  Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.  Proposed (20020131)  ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall | REVIEWING(1) Green    View
3760  CVE-2001-0954  Entry  Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.        View

Page 752 of 20943, showing 5 records out of 104715 total, starting on record 3756, ending on 3760

Actions