CVE-2001-1594 | | | 2015-08-04 | GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3)… |
CVE-2001-1593 | | | 2014-04-05 | The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to m… |
CVE-2001-1587 | | | 2010-04-05 | NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command. |
CVE-2001-1586 | | | 2010-02-12 | Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") seq… |
CVE-2001-1420 | | | 2005-05-02 | AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overf… |
CVE-2001-1413 | | | 2004-12-23 | Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP serve… |
CVE-2001-1412 | | | 2003-11-17 | nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument. |
CVE-2001-1411 | | | 2003-11-17 | Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs. |
CVE-2001-1410 | | | 2003-08-18 | Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attacker… |
CVE-2001-1409 | | | 2003-07-24 | dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the r… |
CVE-2001-1451 | | | 2002-10-22 | Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attacker… |
CVE-2001-1300 | | | 2002-06-25 | Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command. |
CVE-2001-1340 | | | 2002-05-21 | Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote att… |
CVE-2001-1334 | | | 2002-05-19 | Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specify… |
CVE-2001-1175 | | | 2002-04-01 | vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute f… |
CVE-2001-1174 | | | 2002-04-01 | Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header. |
CVE-2001-1171 | | | 2002-04-01 | Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow lo… |
CVE-2001-1165 | | | 2002-04-01 | Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e… |
CVE-2001-1222 | | | 2002-03-25 | Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid accou… |
CVE-2001-1377 | | | 2002-03-04 | Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of… |
CVE-2001-1376 | | | 2002-03-04 | Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arb… |
CVE-2001-1465 | | | 2002-02-26 | SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting… |
CVE-2001-1079 | | | 2002-02-13 | create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to d… |
CVE-2001-1058 | | | 2002-02-13 | The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a lic… |
CVE-2001-1372 | | | 2002-02-06 | Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP fi… |
CVE-2001-1371 | | | 2002-02-06 | The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-serv… |
CVE-2001-0891 | | | 2002-01-31 | Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to… |
CVE-2001-1457 | | | 2002-01-30 | Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable. |
CVE-2001-0887 | | | 2002-01-15 | xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files. |
CVE-2001-1585 | | | 2001-12-31 | SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perfo… |
CVE-2001-1584 | | | 2001-12-31 | CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field. |
CVE-2001-1583 | | | 2001-12-31 | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not pr… |
CVE-2001-1582 | | | 2001-12-31 | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environmen… |
CVE-2001-1581 | | | 2001-12-31 | The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a… |
CVE-2001-1580 | | | 2001-12-31 | Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences… |
CVE-2001-1579 | | | 2001-12-31 | The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a… |
CVE-2001-1578 | | | 2001-12-31 | Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descripto… |
CVE-2001-1577 | | | 2001-12-31 | Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. |
CVE-2001-1576 | | | 2001-12-31 | Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. |
CVE-2001-1575 | | | 2001-12-31 | Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a lo… |
CVE-2001-1574 | | | 2001-12-31 | Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code. |
CVE-2001-1573 | | | 2001-12-31 | Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain con… |
CVE-2001-1572 | | | 2001-12-31 | The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet fi… |
CVE-2001-1571 | | | 2001-12-31 | The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user… |
CVE-2001-1570 | | | 2001-12-31 | Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user… |
CVE-2001-1569 | | | 2001-12-31 | Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attacke… |
CVE-2001-1568 | | | 2001-12-31 | CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to… |
CVE-2001-1567 | | | 2001-12-31 | Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes templ… |
CVE-2001-1566 | | | 2001-12-31 | Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the… |
CVE-2001-1565 | | | 2001-12-31 | Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users… |
CVE-2001-1564 | | | 2001-12-31 | setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges a… |
CVE-2001-1563 | | | 2001-12-31 | Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the ve… |
CVE-2001-1562 | | | 2001-12-31 | Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. |
CVE-2001-1561 | | | 2001-12-31 | Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. |
CVE-2001-1560 | | | 2001-12-31 | Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindo… |
CVE-2001-1559 | Medium | 5.5 | 2001-12-31 | The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, wh… |
CVE-2001-1558 | | | 2001-12-31 | Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash). |
CVE-2001-1557 | | | 2001-12-31 | Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. |
CVE-2001-1556 | | | 2001-12-31 | The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote a… |
CVE-2001-1555 | | | 2001-12-31 | pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' ter… |
CVE-2001-1554 | | | 2001-12-31 | IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP pa… |
CVE-2001-1553 | | | 2001-12-31 | Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) sock… |
CVE-2001-1552 | | | 2001-12-31 | ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) messa… |
CVE-2001-1551 | | | 2001-12-31 | Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid progra… |
CVE-2001-1550 | | | 2001-12-31 | CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext pa… |
CVE-2001-1549 | | | 2001-12-31 | Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters. |
CVE-2001-1548 | | | 2001-12-31 | ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol a… |
CVE-2001-1547 | | | 2001-12-31 | Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from for… |
CVE-2001-1546 | High | 7.8 | 2001-12-31 | Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc… |
CVE-2001-1545 | | | 2001-12-31 | Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers… |
CVE-2001-1544 | | | 2001-12-31 | Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in… |
CVE-2001-1543 | | | 2001-12-31 | Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camer… |
CVE-2001-1542 | | | 2001-12-31 | NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering… |
CVE-2001-1541 | | | 2001-12-31 | Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argume… |
CVE-2001-1540 | | | 2001-12-31 | IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented IP packets that split the TCP header. |
CVE-2001-1539 | | | 2001-12-31 | Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to cause a denial of servi… |
CVE-2001-1538 | | | 2001-12-31 | SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access. |
CVE-2001-1537 | High | 7.5 | 2001-12-31 | The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow a… |
CVE-2001-1536 | High | 7.5 | 2001-12-31 | Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain una… |
CVE-2001-1535 | | | 2001-12-31 | Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized… |
CVE-2001-1534 | | | 2001-12-31 | mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID… |
CVE-2001-1533 | Medium | 5.3 | 2001-12-31 | Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets. NOT… |
CVE-2001-1532 | | | 2001-12-31 | WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could… |
CVE-2001-1531 | | | 2001-12-31 | Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a… |
CVE-2001-1530 | | | 2001-12-31 | run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands. |
CVE-2001-1529 | | | 2001-12-31 | Buffer overflow in rpc.yppasswdd (yppasswd server) in AIX allows attackers to gain unauthorized access via a long string. NOTE: due to lack of details in the… |
CVE-2001-1528 | | | 2001-12-31 | AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to… |
CVE-2001-1527 | | | 2001-12-31 | easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access. |
CVE-2001-1526 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script… |
CVE-2001-1525 | | | 2001-12-31 | Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly othe… |
CVE-2001-1524 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname paramet… |
CVE-2001-1523 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic pa… |
CVE-2001-1522 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. |
CVE-2001-1521 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter. |
CVE-2001-1520 | | | 2001-12-31 | Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, an… |
CVE-2001-1519 | | | 2001-12-31 | RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords… |
CVE-2001-1518 | | | 2001-12-31 | RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a… |
CVE-2001-1517 | | | 2001-12-31 | RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by execu… |
CVE-2001-1516 | | | 2001-12-31 | Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted r… |
CVE-2001-1515 | High | 7.5 | 2001-12-31 | Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which… |