2001 CVEs (page 16)
Page 16 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0014 | | 2001-02-12 | Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial… | |
CVE-2001-0013 | | 2001-02-12 | Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. | |
CVE-2001-0012 | | 2001-02-12 | BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. | |
CVE-2001-0011 | | 2001-02-12 | Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. | |
CVE-2001-0010 | | 2001-02-12 | Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. | |
CVE-2001-0009 | | 2001-02-12 | Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack. | |
CVE-2001-0008 | | 2001-02-12 | Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures. | |
CVE-2001-0007 | | 2001-02-12 | Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface. | |
CVE-2001-0006 | High | 7.1 | 2001-02-12 | The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permission… |
CVE-2001-0005 | | 2001-02-12 | Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands. | |
CVE-2001-0004 | | 2001-02-12 | IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes t… | |
CVE-2001-0003 | | 2001-02-12 | Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authent… | |
CVE-2001-1454 | | 2001-02-09 | Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request. | |
CVE-2001-1453 | | 2001-02-09 | Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter. | |
CVE-2001-1468 | | 2001-02-07 | PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying… | |
CVE-2001-1358 | | 2001-02-07 | Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (local… | |
CVE-2001-1357 | | 2001-02-07 | Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly… | |
CVE-2001-1422 | | 2001-01-23 | WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing t… | |
CVE-2001-1274 | | 2001-01-23 | Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges. | |
CVE-2001-1275 | | 2001-01-19 | MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table… | |
CVE-2001-1476 | | 2001-01-18 | SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords… | |
CVE-2001-1475 | | 2001-01-18 | SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated. | |
CVE-2001-1474 | | 2001-01-18 | SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by… | |
CVE-2001-1473 | | 2001-01-18 | The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session I… | |
CVE-2001-1470 | | 2001-01-18 | The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block wi… | |
CVE-2001-1469 | | 2001-01-18 | The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CR… | |
CVE-2001-1436 | | 2001-01-18 | Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduc… | |
CVE-2001-1416 | | 2001-01-18 | Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to… | |
CVE-2001-1385 | | 2001-01-12 | The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, wh… | |
CVE-2001-1044 | | 2001-01-11 | Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows… | |
CVE-2001-1464 | | 2001-01-10 | Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and th… | |
CVE-2001-1037 | | 2001-01-08 | Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands wit… | |
CVE-2001-0163 | | 2001-01-01 | Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | |
CVE-2001-0162 | | 2001-01-01 | WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | |
CVE-2001-0161 | | 2001-01-01 | Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote atta… | |
CVE-2001-0160 | | 2001-01-01 | Lucent/ORiNOCO WaveLAN cards generate predictable Initialization Vector (IV) values for the Wireless Encryption Protocol (WEP) which allows remote attackers to… | |
CVE-2001-0679 | | 1999-11-08 | A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server. |