CVE List

Id CVE No. Status Description Phase Votes Comments Actions
3891  CVE-2001-1087  Candidate  The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.  Proposed (20020315)  ACCEPT(1) Frech | NOOP(6) Armstrong, Cole, Foat, Green, Wall, Ziese    View
3892  CVE-2001-1088  Entry  Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.        View
3893  CVE-2001-1089  Entry  libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.        View
3894  CVE-2001-1090  Candidate  nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.  Proposed (20020315)  ACCEPT(2) Frech, Green | NOOP(5) Armstrong, Cole, Foat, Wall, Ziese    View
3895  CVE-2001-1091  Candidate  The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.  Proposed (20020315)  ACCEPT(6) Armstrong, Baker, Cole, Frech, Green, Ziese | NOOP(2) Foat, Wall    View

Page 779 of 20943, showing 5 records out of 104715 total, starting on record 3891, ending on 3895

Actions