2001 CVEs (page 11)
Page 11 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-1251 | | 2001-06-29 | SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests. | |
CVE-2001-1250 | | 2001-06-29 | vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow. | |
CVE-2001-1249 | | 2001-06-29 | vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names. | |
CVE-2001-1248 | | 2001-06-29 | vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20). | |
CVE-2001-1239 | | 2001-06-29 | PowerNet IX allows remote attackers to cause a denial of service via a port scan. | |
CVE-2001-1290 | | 2001-06-28 | admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and e… | |
CVE-2001-1164 | | 2001-06-27 | Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconve… | |
CVE-2001-0496 | | 2001-06-27 | kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges. | |
CVE-2001-0495 | | 2001-06-27 | Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack. | |
CVE-2001-0494 | | 2001-06-27 | Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header. | |
CVE-2001-0493 | | 2001-06-27 | Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux. | |
CVE-2001-0492 | | 2001-06-27 | Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2… | |
CVE-2001-0491 | | 2001-06-27 | Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as… | |
CVE-2001-0490 | | 2001-06-27 | Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. | |
CVE-2001-0489 | | 2001-06-27 | Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands. | |
CVE-2001-0488 | | 2001-06-27 | pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. | |
CVE-2001-0487 | | 2001-06-27 | AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. | |
CVE-2001-0485 | | 2001-06-27 | Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via th… | |
CVE-2001-0484 | | 2001-06-27 | Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remot… | |
CVE-2001-0481 | | 2001-06-27 | Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling. | |
CVE-2001-0480 | | 2001-06-27 | Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) C… | |
CVE-2001-0479 | | 2001-06-27 | Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument… | |
CVE-2001-0478 | | 2001-06-27 | Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument… | |
CVE-2001-0477 | | 2001-06-27 | Vulnerability in WebCalendar 0.9.26 allows remote command execution. | |
CVE-2001-0476 | | 2001-06-27 | Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP q… | |
CVE-2001-0475 | | 2001-06-27 | index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute… | |
CVE-2001-0474 | | 2001-06-27 | Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file. | |
CVE-2001-0473 | | 2001-06-27 | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. | |
CVE-2001-0472 | | 2001-06-27 | Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely… | |
CVE-2001-0471 | | 2001-06-27 | SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts w… | |
CVE-2001-0470 | | 2001-06-27 | Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name. | |
CVE-2001-0469 | | 2001-06-27 | rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets… | |
CVE-2001-0468 | | 2001-06-27 | Buffer overflow in FTPFS allows local users to gain root privileges via a long user name. | |
CVE-2001-0467 | | 2001-06-27 | Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \... (modified dot dot) in… | |
CVE-2001-0463 | | 2001-06-27 | Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (dot dot) in the p0 parameter. | |
CVE-2001-0462 | | 2001-06-27 | Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | |
CVE-2001-0461 | | 2001-06-27 | template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argume… | |
CVE-2001-0460 | | 2001-06-27 | Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extreme… | |
CVE-2001-0459 | | 2001-06-27 | Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option. | |
CVE-2001-0458 | | 2001-06-27 | Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. | |
CVE-2001-0457 | | 2001-06-27 | man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion). | |
CVE-2001-0456 | | 2001-06-27 | postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access… | |
CVE-2001-0455 | | 2001-06-27 | Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configu… | |
CVE-2001-0454 | | 2001-06-27 | Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (modified dot dot) in the HTTP request. | |
CVE-2001-0453 | | 2001-06-27 | Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2… | |
CVE-2001-0452 | | 2001-06-27 | BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command. | |
CVE-2001-0451 | | 2001-06-27 | INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_admin_authenticated cookie value to 1. | |
CVE-2001-0450 | | 2001-06-27 | Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directori… | |
CVE-2001-0449 | | 2001-06-27 | Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option. | |
CVE-2001-0442 | | 2001-06-27 | Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary cod… | |
CVE-2001-0441 | | 2001-06-27 | Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a lon… | |
CVE-2001-0425 | | 2001-06-27 | AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a… | |
CVE-2001-0417 | | 2001-06-27 | Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files. | |
CVE-2001-0416 | | 2001-06-27 | sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed b… | |
CVE-2001-0415 | | 2001-06-27 | REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other account… | |
CVE-2001-0407 | | 2001-06-27 | Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name st… | |
CVE-2001-0388 | | 2001-06-27 | time server daemon timed allows remote attackers to cause a denial of service via malformed packets. | |
CVE-2001-0381 | | 2001-06-27 | The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted privat… | |
CVE-2001-0378 | | 2001-06-27 | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensit… | |
CVE-2001-0370 | | 2001-06-27 | fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that conta… | |
CVE-2001-0369 | | 2001-06-27 | Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent prin… | |
CVE-2001-0368 | | 2001-06-27 | Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters… | |
CVE-2001-0367 | | 2001-06-27 | Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of %… | |
CVE-2001-0366 | | 2001-06-27 | saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local us… | |
CVE-2001-0365 | | 2001-06-27 | Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabl… | |
CVE-2001-0364 | | 2001-06-27 | SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections. | |
CVE-2001-0361 | | 2001-06-27 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allo… | |
CVE-2001-0360 | | 2001-06-27 | Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the… | |
CVE-2001-0359 | | 2001-06-27 | Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command. | |
CVE-2001-0358 | | 2001-06-27 | Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) a long exec comman… | |
CVE-2001-0355 | | 2001-06-27 | Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. | |
CVE-2001-0339 | | 2001-06-27 | Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed… | |
CVE-2001-0338 | | 2001-06-27 | Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow… | |
CVE-2001-0337 | | 2001-06-27 | The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of… | |
CVE-2001-0336 | | 2001-06-27 | The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request. | |
CVE-2001-0335 | | 2001-06-27 | FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of… | |
CVE-2001-0334 | High | 7.5 | 2001-06-27 | FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expande… |
CVE-2001-0333 | | 2001-06-27 | Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twic… | |
CVE-2001-0332 | | 2001-06-27 | Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certai… | |
CVE-2001-0331 | | 2001-06-27 | Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2001-0330 | | 2001-06-27 | Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl fil… | |
CVE-2001-0329 | | 2001-06-27 | Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login coo… | |
CVE-2001-0328 | | 2001-06-27 | TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by inje… | |
CVE-2001-0246 | | 2001-06-27 | Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certai… | |
CVE-2001-0245 | | 2001-06-27 | Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed s… | |
CVE-2001-0244 | | 2001-06-27 | Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter. | |
CVE-2001-0243 | | 2001-06-27 | Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache… | |
CVE-2001-0242 | | 2001-06-27 | Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX fil… | |
CVE-2001-0241 | | 2001-06-27 | Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to… | |
CVE-2001-0240 | | 2001-06-27 | Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a… | |
CVE-2001-0237 | | 2001-06-27 | Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then… | |
CVE-2001-1324 | | 2001-06-26 | cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause t… | |
CVE-2001-1083 | | 2001-06-26 | Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) vi… | |
CVE-2001-1162 | | 2001-06-23 | Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files… | |
CVE-2001-1328 | | 2001-06-22 | Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code. | |
CVE-2001-0906 | | 2001-06-22 | teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr. | |
CVE-2001-1276 | | 2001-06-21 | ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file. | |
CVE-2001-1078 | | 2001-06-21 | Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP c… | |
CVE-2001-1459 | | 2001-06-19 | OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to byp… | |
CVE-2001-1080 | | 2001-06-19 | diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by mod… |