2001 CVEs (page 15)
Page 15 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0109 | | 2001-03-12 | rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file. | |
CVE-2001-0108 | | 2001-03-12 | PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that c… | |
CVE-2001-0107 | | 2001-03-12 | Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, which causes the proc… | |
CVE-2001-0017 | | 2001-03-12 | Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet S… | |
CVE-2001-0016 | | 2001-03-12 | NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administr… | |
CVE-2001-0015 | | 2001-03-12 | Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is run… | |
CVE-2001-1103 | | 2001-03-03 | FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attac… | |
CVE-2001-1445 | | 2001-03-01 | Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addres… | |
CVE-2001-1434 | | 2001-02-28 | Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which cre… | |
CVE-2001-1435 | | 2001-02-23 | inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core… | |
CVE-2001-1439 | | 2001-02-16 | Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of servi… | |
CVE-2001-0092 | | 2001-02-16 | A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read… | |
CVE-2001-0091 | | 2001-02-16 | The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to rea… | |
CVE-2001-0090 | | 2001-02-16 | The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to exe… | |
CVE-2001-0089 | | 2001-02-16 | Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upl… | |
CVE-2001-0088 | | 2001-02-16 | common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, allowing remote at… | |
CVE-2001-0066 | | 2001-02-16 | Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the i… | |
CVE-2001-0058 | | 2001-02-16 | The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that does not end in a spac… | |
CVE-2001-0057 | | 2001-02-16 | Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. | |
CVE-2001-0056 | | 2001-02-16 | The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords with… | |
CVE-2001-0055 | | 2001-02-16 | CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. | |
CVE-2001-0054 | | 2001-02-16 | Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such… | |
CVE-2001-0052 | | 2001-02-16 | IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query. | |
CVE-2001-0051 | | 2001-02-16 | IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain access to the database. | |
CVE-2001-0050 | | 2001-02-16 | Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolv… | |
CVE-2001-0049 | | 2001-02-16 | WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests. | |
CVE-2001-0047 | | 2001-02-16 | The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transacti… | |
CVE-2001-0046 | | 2001-02-16 | The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings t… | |
CVE-2001-0045 | | 2001-02-16 | The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a m… | |
CVE-2001-0044 | | 2001-02-16 | Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_parall… | |
CVE-2001-0043 | | 2001-02-16 | phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info parameter of the p… | |
CVE-2001-0042 | | 2001-02-16 | PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequence… | |
CVE-2001-0041 | | 2001-02-16 | Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentic… | |
CVE-2001-0040 | | 2001-02-16 | APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process… | |
CVE-2001-0039 | | 2001-02-16 | IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is… | |
CVE-2001-0038 | | 2001-02-16 | Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL. | |
CVE-2001-0037 | | 2001-02-16 | Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers. | |
CVE-2001-0036 | | 2001-02-16 | KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file. | |
CVE-2001-0035 | | 2001-02-16 | Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary command… | |
CVE-2001-0034 | | 2001-02-16 | KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and pos… | |
CVE-2001-0033 | | 2001-02-16 | KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using… | |
CVE-2001-0032 | | 2001-02-16 | Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format str… | |
CVE-2001-0031 | | 2001-02-16 | BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist. | |
CVE-2001-0030 | | 2001-02-16 | FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them. | |
CVE-2001-0021 | | 2001-02-16 | MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter. | |
CVE-2001-1273 | | 2001-02-12 | The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system… | |
CVE-2001-0106 | | 2001-02-12 | Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server. | |
CVE-2001-0105 | | 2001-02-12 | Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group. | |
CVE-2001-0104 | | 2001-02-12 | MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressi… | |
CVE-2001-0103 | | 2001-02-12 | CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the pas… | |
CVE-2001-0102 | | 2001-02-12 | "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the… | |
CVE-2001-0101 | | 2001-02-12 | Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command. | |
CVE-2001-0100 | | 2001-02-12 | bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address. | |
CVE-2001-0099 | | 2001-02-12 | bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address. | |
CVE-2001-0098 | | 2001-02-12 | Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string. | |
CVE-2001-0097 | | 2001-02-12 | The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request. | |
CVE-2001-0096 | | 2001-02-12 | FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Su… | |
CVE-2001-0095 | | 2001-02-12 | catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file. | |
CVE-2001-0094 | | 2001-02-12 | Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications… | |
CVE-2001-0093 | | 2001-02-12 | Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of te… | |
CVE-2001-0087 | | 2001-02-12 | itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users to gain root privile… | |
CVE-2001-0086 | | 2001-02-12 | CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling s… | |
CVE-2001-0085 | | 2001-02-12 | Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary comm… | |
CVE-2001-0084 | | 2001-02-12 | GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GT… | |
CVE-2001-0083 | | 2001-02-12 | Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows… | |
CVE-2001-0082 | | 2001-02-12 | Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets. | |
CVE-2001-0081 | | 2001-02-12 | swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to ga… | |
CVE-2001-0080 | | 2001-02-12 | Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which g… | |
CVE-2001-0079 | | 2001-02-12 | Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file. | |
CVE-2001-0078 | | 2001-02-12 | in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS. | |
CVE-2001-0077 | | 2001-02-12 | The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and… | |
CVE-2001-0076 | | 2001-02-12 | register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal pr… | |
CVE-2001-0075 | | 2001-02-12 | Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter. | |
CVE-2001-0074 | | 2001-02-12 | Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the board parameter. | |
CVE-2001-0073 | | 2001-02-12 | Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers to modify critical data in memory. | |
CVE-2001-0072 | | 2001-02-12 | gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which… | |
CVE-2001-0071 | | 2001-02-12 | gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detectio… | |
CVE-2001-0070 | | 2001-02-12 | Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM c… | |
CVE-2001-0069 | | 2001-02-12 | dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0068 | | 2001-02-12 | Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet param… | |
CVE-2001-0067 | | 2001-02-12 | The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmOS backup informati… | |
CVE-2001-0065 | | 2001-02-12 | Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command. | |
CVE-2001-0064 | | 2001-02-12 | Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" str… | |
CVE-2001-0063 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional priv… | |
CVE-2001-0062 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which caus… | |
CVE-2001-0061 | | 2001-02-12 | procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain roo… | |
CVE-2001-0060 | | 2001-02-12 | Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username. | |
CVE-2001-0059 | | 2001-02-12 | patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0053 | | 2001-02-12 | One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. | |
CVE-2001-0048 | | 2001-02-12 | The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers… | |
CVE-2001-0029 | | 2001-02-12 | Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain na… | |
CVE-2001-0028 | | 2001-02-12 | Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of… | |
CVE-2001-0027 | | 2001-02-12 | mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to ga… | |
CVE-2001-0026 | | 2001-02-12 | rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option. | |
CVE-2001-0025 | | 2001-02-12 | ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. | |
CVE-2001-0024 | | 2001-02-12 | simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter. | |
CVE-2001-0023 | | 2001-02-12 | everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter. | |
CVE-2001-0022 | | 2001-02-12 | simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter. | |
CVE-2001-0020 | | 2001-02-12 | Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot)… | |
CVE-2001-0019 | | 2001-02-12 | Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show… |