2001 CVEs (page 10)
Page 10 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-1317 | | 2001-07-16 | Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings fo… | |
CVE-2001-1316 | | 2001-07-16 | Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as d… | |
CVE-2001-1315 | | 2001-07-16 | Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitra… | |
CVE-2001-1314 | | 2001-07-16 | Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and poss… | |
CVE-2001-1313 | | 2001-07-16 | Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with… | |
CVE-2001-1312 | | 2001-07-16 | Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… | |
CVE-2001-1311 | | 2001-07-16 | Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstr… | |
CVE-2001-1310 | | 2001-07-16 | IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a… | |
CVE-2001-1309 | | 2001-07-16 | Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the… | |
CVE-2001-1308 | | 2001-07-16 | Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly exe… | |
CVE-2001-1307 | | 2001-07-16 | Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrar… | |
CVE-2001-1306 | | 2001-07-16 | iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid… | |
CVE-2001-1238 | High | 7.8 | 2001-07-16 | Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) ser… |
CVE-2001-1181 | | 2001-07-16 | Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges. | |
CVE-2001-0977 | | 2001-07-16 | slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BE… | |
CVE-2001-0975 | | 2001-07-16 | Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated… | |
CVE-2001-1082 | | 2001-07-13 | Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2001-1053 | | 2001-07-13 | AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument. | |
CVE-2001-1291 | Critical | 9.8 | 2001-07-12 | The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, whi… |
CVE-2001-1271 | | 2001-07-12 | Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on… | |
CVE-2001-1270 | | 2001-07-12 | Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extrac… | |
CVE-2001-1269 | | 2001-07-12 | Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (s… | |
CVE-2001-1268 | | 2001-07-12 | Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot)… | |
CVE-2001-1267 | | 2001-07-12 | Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose… | |
CVE-2001-1183 | | 2001-07-12 | PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet. | |
CVE-2001-1176 | | 2001-07-12 | Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strin… | |
CVE-2001-1142 | | 2001-07-12 | ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges. | |
CVE-2001-1427 | | 2001-07-11 | Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors. | |
CVE-2001-1240 | | 2001-07-11 | The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full… | |
CVE-2001-1178 | | 2001-07-11 | Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable. | |
CVE-2001-1146 | | 2001-07-11 | AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a… | |
CVE-2001-1144 | | 2001-07-11 | Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request. | |
CVE-2001-1143 | | 2001-07-11 | IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789. | |
CVE-2001-1120 | | 2001-07-11 | Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. | |
CVE-2001-1038 | | 2001-07-11 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023. | |
CVE-2001-1322 | | 2001-07-10 | xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs und… | |
CVE-2001-1180 | | 2001-07-10 | FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared… | |
CVE-2001-1141 | | 2001-07-10 | The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the intern… | |
CVE-2001-1245 | | 2001-07-09 | Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose v… | |
CVE-2001-1158 | | 2001-07-09 | Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forge… | |
CVE-2001-1026 | | 2001-07-09 | Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a si… | |
CVE-2001-1244 | | 2001-07-07 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS)… | |
CVE-2001-1081 | | 2001-07-06 | Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute… | |
CVE-2001-1045 | | 2001-07-06 | Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) i… | |
CVE-2001-1408 | | 2001-07-05 | Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the ma… | |
CVE-2001-1087 | | 2001-07-05 | The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrar… | |
CVE-2001-1085 | | 2001-07-05 | Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. | |
CVE-2001-1076 | | 2001-07-05 | Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable. | |
CVE-2001-1243 | | 2001-07-04 | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an A… | |
CVE-2001-1086 | | 2001-07-04 | XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers t… | |
CVE-2001-1075 | | 2001-07-04 | poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that i… | |
CVE-2001-1266 | | 2001-07-03 | Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack… | |
CVE-2001-1441 | | 2001-07-02 | Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, whi… | |
CVE-2001-1161 | | 2001-07-02 | Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript… | |
CVE-2001-1159 | | 2001-07-02 | load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers t… | |
CVE-2001-1084 | | 2001-07-02 | Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jru… | |
CVE-2001-1042 | High | 7.5 | 2001-07-02 | Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file. |
CVE-2001-0486 | | 2001-07-02 | Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. | |
CVE-2001-0464 | | 2001-07-02 | Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter. | |
CVE-2001-0444 | | 2001-07-02 | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, w… | |
CVE-2001-0443 | | 2001-07-02 | Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (1)… | |
CVE-2001-0440 | | 2001-07-02 | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. | |
CVE-2001-0439 | | 2001-07-02 | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2001-0438 | | 2001-07-02 | Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. | |
CVE-2001-0437 | | 2001-07-02 | upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file. | |
CVE-2001-0436 | | 2001-07-02 | dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the… | |
CVE-2001-0435 | | 2001-07-02 | The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option a… | |
CVE-2001-0434 | | 2001-07-02 | The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify… | |
CVE-2001-0432 | | 2001-07-02 | Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitr… | |
CVE-2001-0431 | | 2001-07-02 | Vulnerability in iPlanet Web Server Enterprise Edition 4.x. | |
CVE-2001-0430 | | 2001-07-02 | Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files. | |
CVE-2001-0429 | | 2001-07-02 | Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network stor… | |
CVE-2001-0428 | | 2001-07-02 | Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option. | |
CVE-2001-0426 | | 2001-07-02 | Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable. | |
CVE-2001-0424 | | 2001-07-02 | BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id. | |
CVE-2001-0423 | | 2001-07-02 | Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerabilit… | |
CVE-2001-0422 | | 2001-07-02 | Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. | |
CVE-2001-0421 | | 2001-07-02 | FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by… | |
CVE-2001-0419 | | 2001-07-02 | Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote… | |
CVE-2001-0418 | | 2001-07-02 | content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into… | |
CVE-2001-0406 | | 2001-07-02 | Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient… | |
CVE-2001-0405 | | 2001-07-02 | ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists a… | |
CVE-2001-0400 | | 2001-07-02 | nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address. | |
CVE-2001-0396 | | 2001-07-02 | The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system… | |
CVE-2001-0395 | Critical | 9.8 | 2001-07-02 | Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password gu… |
CVE-2001-0391 | | 2001-07-02 | Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory. | |
CVE-2001-0390 | | 2001-07-02 | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a charact… | |
CVE-2001-0389 | | 2001-07-02 | IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTML… | |
CVE-2001-0387 | | 2001-07-02 | Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument. | |
CVE-2001-0386 | | 2001-07-02 | AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. | |
CVE-2001-0385 | | 2001-07-02 | GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. | |
CVE-2001-0384 | | 2001-07-02 | ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. | |
CVE-2001-0354 | | 2001-07-02 | TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on. | |
CVE-2001-0327 | | 2001-07-02 | iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of ser… | |
CVE-2001-0262 | | 2001-07-02 | Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL. | |
CVE-2001-0239 | | 2001-07-02 | Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a spe… | |
CVE-2001-0238 | | 2001-07-02 | Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV r… | |
CVE-2001-1386 | High | 7.5 | 2001-07-01 | WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".ln… |
CVE-2001-1043 | High | 7.5 | 2001-07-01 | ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file. |
CVE-2001-1246 | | 2001-06-30 | PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers… |