2001 CVEs (page 14)
Page 14 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0191 | | 2001-05-03 | gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attacker… | |
CVE-2001-0186 | | 2001-05-03 | Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2001-0180 | | 2001-05-03 | Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter. | |
CVE-2001-0179 | | 2001-05-03 | Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that con… | |
CVE-2001-0174 | | 2001-05-03 | Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a larg… | |
CVE-2001-0173 | | 2001-05-03 | Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitra… | |
CVE-2001-0171 | | 2001-05-03 | Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request. | |
CVE-2001-0168 | | 2001-05-03 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET… | |
CVE-2001-0167 | | 2001-05-03 | Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnF… | |
CVE-2001-0165 | | 2001-05-03 | Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument. | |
CVE-2001-0154 | | 2001-05-03 | HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Inte… | |
CVE-2001-0153 | | 2001-05-03 | Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands. | |
CVE-2001-0152 | | 2001-05-03 | The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows lo… | |
CVE-2001-0147 | | 2001-05-03 | Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the… | |
CVE-2001-0145 | | 2001-05-03 | Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthd… | |
CVE-2001-1442 | | 2001-04-21 | Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argumen… | |
CVE-2001-1325 | | 2001-04-20 | Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the sc… | |
CVE-2001-1400 | | 2001-04-17 | Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock). | |
CVE-2001-1399 | | 2001-04-17 | Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "Use… | |
CVE-2001-1398 | | 2001-04-17 | Masquerading code for Linux kernel before 2.2.19 does not fully check packet lengths in certain cases, which may lead to a vulnerability. | |
CVE-2001-1397 | | 2001-04-17 | The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory. | |
CVE-2001-1396 | | 2001-04-17 | Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact. | |
CVE-2001-1395 | | 2001-04-17 | Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact. | |
CVE-2001-1394 | | 2001-04-17 | Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service. | |
CVE-2001-1393 | | 2001-04-17 | Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang). | |
CVE-2001-1392 | | 2001-04-17 | The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the… | |
CVE-2001-1391 | Medium | 5.5 | 2001-04-17 | Off-by-one vulnerability in CPIA driver of Linux kernel before 2.2.19 allows users to modify kernel memory. |
CVE-2001-1390 | | 2001-04-17 | Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages. | |
CVE-2001-1467 | | 2001-04-11 | mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible s… | |
CVE-2001-1426 | | 2001-04-10 | Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers t… | |
CVE-2001-1425 | | 2001-04-10 | The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote at… | |
CVE-2001-1424 | | 2001-04-10 | Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers… | |
CVE-2001-0235 | | 2001-03-26 | Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running. | |
CVE-2001-0233 | | 2001-03-26 | Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Desc… | |
CVE-2001-0232 | | 2001-03-26 | newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters. | |
CVE-2001-0231 | | 2001-03-26 | Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter. | |
CVE-2001-0223 | | 2001-03-26 | Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request). | |
CVE-2001-0222 | | 2001-03-26 | webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. | |
CVE-2001-0219 | | 2001-03-26 | Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service. | |
CVE-2001-0209 | | 2001-03-26 | Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary… | |
CVE-2001-0207 | | 2001-03-26 | Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup… | |
CVE-2001-0203 | | 2001-03-26 | Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains h… | |
CVE-2001-0201 | | 2001-03-26 | The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries… | |
CVE-2001-0197 | | 2001-03-26 | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands. | |
CVE-2001-0195 | High | 7.8 | 2001-03-26 | sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via pas… |
CVE-2001-0190 | | 2001-03-26 | Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a l… | |
CVE-2001-0189 | | 2001-03-26 | Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET reque… | |
CVE-2001-0188 | | 2001-03-26 | GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to c… | |
CVE-2001-0187 | | 2001-03-26 | Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malf… | |
CVE-2001-0185 | | 2001-03-26 | Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP add… | |
CVE-2001-0184 | | 2001-03-26 | eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet. | |
CVE-2001-0183 | | 2001-03-26 | ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet… | |
CVE-2001-0182 | | 2001-03-26 | FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various sour… | |
CVE-2001-0181 | | 2001-03-26 | Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands. | |
CVE-2001-0178 | | 2001-03-26 | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to ste… | |
CVE-2001-0177 | | 2001-03-26 | WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone. | |
CVE-2001-0176 | | 2001-03-26 | The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges. | |
CVE-2001-0175 | | 2001-03-26 | The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of… | |
CVE-2001-0172 | | 2001-03-26 | Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long director… | |
CVE-2001-0170 | | 2001-03-26 | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid program… | |
CVE-2001-0169 | | 2001-03-26 | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID… | |
CVE-2001-0166 | | 2001-03-26 | Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file. | |
CVE-2001-1230 | | 2001-03-13 | Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code. | |
CVE-2001-0122 | | 2001-03-13 | Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to… | |
CVE-2001-1229 | | 2001-03-12 | Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary co… | |
CVE-2001-0925 | | 2001-03-12 | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a… | |
CVE-2001-0144 | | 2001-03-12 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. | |
CVE-2001-0143 | | 2001-03-12 | vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0142 | | 2001-03-12 | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0141 | | 2001-03-12 | mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0140 | | 2001-03-12 | arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0139 | | 2001-03-12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2001-0138 | | 2001-03-12 | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0137 | | 2001-03-12 | Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin… | |
CVE-2001-0136 | | 2001-03-12 | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commands if the server ha… | |
CVE-2001-0135 | | 2001-03-12 | The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local… | |
CVE-2001-0134 | | 2001-03-12 | Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remo… | |
CVE-2001-0133 | | 2001-03-12 | The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administra… | |
CVE-2001-0132 | | 2001-03-12 | Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink… | |
CVE-2001-0131 | | 2001-03-12 | htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0130 | | 2001-03-12 | Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a denial of service a… | |
CVE-2001-0129 | | 2001-03-12 | Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lo… | |
CVE-2001-0128 | | 2001-03-12 | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. | |
CVE-2001-0127 | | 2001-03-12 | Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary c… | |
CVE-2001-0126 | | 2001-03-12 | Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-sty… | |
CVE-2001-0125 | | 2001-03-12 | exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file. | |
CVE-2001-0124 | | 2001-03-12 | Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument. | |
CVE-2001-0123 | | 2001-03-12 | Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter. | |
CVE-2001-0121 | | 2001-03-12 | ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002. | |
CVE-2001-0120 | | 2001-03-12 | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0119 | | 2001-03-12 | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0118 | | 2001-03-12 | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0117 | | 2001-03-12 | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. | |
CVE-2001-0116 | | 2001-03-12 | gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0115 | | 2001-03-12 | Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter. | |
CVE-2001-0114 | | 2001-03-12 | statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter. | |
CVE-2001-0113 | | 2001-03-12 | statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generat… | |
CVE-2001-0112 | | 2001-03-12 | Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands. | |
CVE-2001-0111 | | 2001-03-12 | Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument. | |
CVE-2001-0110 | | 2001-03-12 | Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable. |