2001 CVEs (page 13)
Page 13 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0164 | | 2001-06-02 | Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malforme… | |
CVE-2001-0157 | | 2001-06-02 | Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and ob… | |
CVE-2001-0156 | | 2001-06-02 | VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding… | |
CVE-2001-0155 | | 2001-06-02 | Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format… | |
CVE-2001-0151 | | 2001-06-02 | IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. | |
CVE-2001-0150 | | 2001-06-02 | Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers… | |
CVE-2001-0149 | | 2001-06-02 | Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlf… | |
CVE-2001-0148 | | 2001-06-02 | The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame… | |
CVE-2001-0146 | | 2001-06-02 | IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a series of specially f… | |
CVE-2001-0001 | | 2001-06-02 | cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information… | |
CVE-2001-0781 | | 2001-05-30 | Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST. | |
CVE-2001-1326 | | 2001-05-29 | Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" opti… | |
CVE-2001-1349 | | 2001-05-28 | Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via… | |
CVE-2001-1348 | | 2001-05-28 | TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter. | |
CVE-2001-1336 | | 2001-05-28 | CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges. | |
CVE-2001-1074 | | 2001-05-28 | Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication inform… | |
CVE-2001-1028 | | 2001-05-28 | Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges. | |
CVE-2001-1335 | | 2001-05-27 | Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a… | |
CVE-2001-1428 | | 2001-05-24 | The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access. | |
CVE-2001-1347 | | 2001-05-24 | Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug r… | |
CVE-2001-1341 | | 2001-05-24 | The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information v… | |
CVE-2001-1339 | Critical | 9.8 | 2001-05-24 | Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote atta… |
CVE-2001-1338 | | 2001-05-24 | Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accoun… | |
CVE-2001-1327 | | 2001-05-24 | pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vul… | |
CVE-2001-0749 | | 2001-05-24 | Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root. | |
CVE-2001-0551 | | 2001-05-22 | Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window. | |
CVE-2001-1337 | | 2001-05-21 | Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request. | |
CVE-2001-1346 | | 2001-05-18 | Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary file… | |
CVE-2001-1323 | | 2001-05-16 | Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64… | |
CVE-2001-1342 | | 2001-05-12 | Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large… | |
CVE-2001-1450 | | 2001-05-11 | Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./". | |
CVE-2001-1333 | | 2001-05-10 | Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files. | |
CVE-2001-1332 | | 2001-05-10 | Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code. | |
CVE-2001-1331 | | 2001-05-03 | mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop pr… | |
CVE-2001-0326 | | 2001-05-03 | Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via th… | |
CVE-2001-0325 | | 2001-05-03 | Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to… | |
CVE-2001-0324 | | 2001-05-03 | Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which… | |
CVE-2001-0321 | | 2001-05-03 | opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter. | |
CVE-2001-0320 | | 2001-05-03 | bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null cha… | |
CVE-2001-0319 | | 2001-05-03 | orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report c… | |
CVE-2001-0317 | | 2001-05-03 | Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process. | |
CVE-2001-0316 | | 2001-05-03 | Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call. | |
CVE-2001-0308 | | 2001-05-03 | UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet… | |
CVE-2001-0307 | | 2001-05-03 | Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for… | |
CVE-2001-0306 | | 2001-05-03 | Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. | |
CVE-2001-0305 | | 2001-05-03 | Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartI… | |
CVE-2001-0304 | | 2001-05-03 | Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request. | |
CVE-2001-0303 | | 2001-05-03 | tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file. | |
CVE-2001-0302 | | 2001-05-03 | Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a… | |
CVE-2001-0301 | | 2001-05-03 | Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings. | |
CVE-2001-0298 | | 2001-05-03 | Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET requ… | |
CVE-2001-0297 | | 2001-05-03 | Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) i… | |
CVE-2001-0296 | | 2001-05-03 | Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. | |
CVE-2001-0295 | | 2001-05-03 | Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command. | |
CVE-2001-0294 | | 2001-05-03 | Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a… | |
CVE-2001-0293 | | 2001-05-03 | Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command. | |
CVE-2001-0292 | | 2001-05-03 | PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the sa… | |
CVE-2001-0291 | | 2001-05-03 | Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 pa… | |
CVE-2001-0290 | | 2001-05-03 | Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. | |
CVE-2001-0289 | | 2001-05-03 | Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other u… | |
CVE-2001-0288 | | 2001-05-03 | Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hija… | |
CVE-2001-0287 | | 2001-05-03 | VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command. | |
CVE-2001-0286 | | 2001-05-03 | Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request. | |
CVE-2001-0285 | | 2001-05-03 | Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. | |
CVE-2001-0284 | | 2001-05-03 | Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitra… | |
CVE-2001-0283 | | 2001-05-03 | Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including… | |
CVE-2001-0282 | | 2001-05-03 | SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. | |
CVE-2001-0281 | | 2001-05-03 | Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow loc… | |
CVE-2001-0280 | | 2001-05-03 | Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command. | |
CVE-2001-0279 | | 2001-05-03 | Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges. | |
CVE-2001-0278 | | 2001-05-03 | Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges. | |
CVE-2001-0277 | | 2001-05-03 | Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via… | |
CVE-2001-0276 | | 2001-05-03 | ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without… | |
CVE-2001-0275 | | 2001-05-03 | Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request. | |
CVE-2001-0274 | | 2001-05-03 | kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. | |
CVE-2001-0273 | | 2001-05-03 | pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), wh… | |
CVE-2001-0272 | | 2001-05-03 | Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) atta… | |
CVE-2001-0271 | | 2001-05-03 | mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters. | |
CVE-2001-0270 | | 2001-05-03 | Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the S… | |
CVE-2001-0269 | | 2001-05-03 | pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password. | |
CVE-2001-0268 | | 2001-05-03 | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate… | |
CVE-2001-0267 | | 2001-05-03 | NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges. | |
CVE-2001-0266 | | 2001-05-03 | Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges. | |
CVE-2001-0236 | | 2001-05-03 | Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event. | |
CVE-2001-0234 | | 2001-05-03 | NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter. | |
CVE-2001-0229 | | 2001-05-03 | Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via m… | |
CVE-2001-0228 | | 2001-05-03 | Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request. | |
CVE-2001-0227 | | 2001-05-03 | Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET re… | |
CVE-2001-0226 | | 2001-05-03 | Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET r… | |
CVE-2001-0218 | | 2001-05-03 | Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands. | |
CVE-2001-0213 | | 2001-05-03 | Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands. | |
CVE-2001-0205 | | 2001-05-03 | Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname… | |
CVE-2001-0202 | | 2001-05-03 | Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request. | |
CVE-2001-0200 | | 2001-05-03 | HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if direc… | |
CVE-2001-0199 | | 2001-05-03 | Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request. | |
CVE-2001-0198 | | 2001-05-03 | Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag. | |
CVE-2001-0196 | | 2001-05-03 | inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that a… | |
CVE-2001-0194 | | 2001-05-03 | Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. | |
CVE-2001-0193 | | 2001-05-03 | Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter. | |
CVE-2001-0192 | | 2001-05-03 | Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions. |