2001 CVEs (page 9)
Page 9 of 16 — CVEs published in 2001, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0602 | | 2001-08-02 | Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices. | |
CVE-2001-0601 | | 2001-08-02 | Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters. | |
CVE-2001-0600 | | 2001-08-02 | Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept… | |
CVE-2001-0599 | | 2001-08-02 | Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of servi… | |
CVE-2001-0598 | | 2001-08-02 | Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Serv… | |
CVE-2001-0597 | | 2001-08-02 | Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force att… | |
CVE-2001-0596 | | 2001-08-02 | Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript. | |
CVE-2001-0595 | | 2001-08-02 | Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment varia… | |
CVE-2001-0594 | | 2001-08-02 | kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument. | |
CVE-2001-0592 | | 2001-08-02 | Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP p… | |
CVE-2001-0590 | | 2001-08-02 | Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request… | |
CVE-2001-0573 | | 2001-08-02 | lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is u… | |
CVE-2001-1471 | High | 8.8 | 2001-07-31 | prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variable… |
CVE-2001-1060 | | 2001-07-31 | phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, o… | |
CVE-2001-1059 | | 2001-07-30 | VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. | |
CVE-2001-1057 | | 2001-07-30 | The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286… | |
CVE-2001-1056 | | 2001-07-30 | IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to s… | |
CVE-2001-1055 | | 2001-07-30 | The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with ra… | |
CVE-2001-1289 | | 2001-07-29 | Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255… | |
CVE-2001-1288 | | 2001-07-27 | Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter… | |
CVE-2001-1024 | | 2001-07-27 | login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alt… | |
CVE-2001-1173 | | 2001-07-26 | Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases. | |
CVE-2001-1108 | | 2001-07-26 | Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL. | |
CVE-2001-1107 | | 2001-07-26 | SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server. | |
CVE-2001-1022 | | 2001-07-26 | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and exec… | |
CVE-2001-1021 | | 2001-07-26 | Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR… | |
CVE-2001-1106 | | 2001-07-25 | The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could al… | |
CVE-2001-1104 | | 2001-07-25 | SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. | |
CVE-2001-1011 | | 2001-07-25 | index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and provi… | |
CVE-2001-1097 | | 2001-07-24 | Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. | |
CVE-2001-0993 | | 2001-07-24 | sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_contr… | |
CVE-2001-0991 | | 2001-07-24 | Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an inco… | |
CVE-2001-0989 | | 2001-07-23 | Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign. | |
CVE-2001-0988 | | 2001-07-23 | Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or ob… | |
CVE-2001-0982 | | 2001-07-23 | Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via e… | |
CVE-2001-1010 | | 2001-07-22 | Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot… | |
CVE-2001-0987 | | 2001-07-22 | Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript… | |
CVE-2001-1370 | | 2001-07-21 | prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that mod… | |
CVE-2001-1258 | | 2001-07-21 | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the pre… | |
CVE-2001-1257 | | 2001-07-21 | Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript emb… | |
CVE-2001-0537 | | 2001-07-21 | HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by spe… | |
CVE-2001-0534 | | 2001-07-21 | Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute… | |
CVE-2001-0518 | | 2001-07-21 | Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without s… | |
CVE-2001-0517 | | 2001-07-21 | Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data si… | |
CVE-2001-0516 | | 2001-07-21 | Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorr… | |
CVE-2001-0515 | | 2001-07-21 | Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value. | |
CVE-2001-0514 | | 2001-07-21 | SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with request… | |
CVE-2001-0513 | | 2001-07-21 | Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote a… | |
CVE-2001-0503 | | 2001-07-21 | Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting ser… | |
CVE-2001-0502 | | 2001-07-21 | Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user a… | |
CVE-2001-0501 | | 2001-07-21 | Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes dete… | |
CVE-2001-0500 | | 2001-07-21 | Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbit… | |
CVE-2001-0499 | | 2001-07-21 | Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument t… | |
CVE-2001-0498 | | 2001-07-21 | Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLN… | |
CVE-2001-0497 | High | 7.8 | 2001-07-21 | dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS T… |
CVE-2001-0353 | | 2001-07-21 | Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" ro… | |
CVE-2001-0352 | | 2001-07-21 | SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the v… | |
CVE-2001-0351 | | 2001-07-21 | Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial o… | |
CVE-2001-0350 | | 2001-07-21 | Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitra… | |
CVE-2001-0349 | | 2001-07-21 | Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitra… | |
CVE-2001-0348 | | 2001-07-21 | Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace. | |
CVE-2001-0347 | | 2001-07-21 | Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest… | |
CVE-2001-0346 | | 2001-07-21 | Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them. | |
CVE-2001-0345 | | 2001-07-21 | Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number… | |
CVE-2001-0344 | | 2001-07-21 | An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of… | |
CVE-2001-0341 | | 2001-07-21 | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a… | |
CVE-2001-0340 | | 2001-07-21 | An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious scrip… | |
CVE-2001-0018 | | 2001-07-21 | Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood o… | |
CVE-2001-0002 | | 2001-07-21 | Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, th… | |
CVE-2001-1355 | | 2001-07-20 | Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attacke… | |
CVE-2001-1354 | | 2001-07-20 | NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could all… | |
CVE-2001-1265 | | 2001-07-20 | Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a… | |
CVE-2001-1375 | | 2001-07-19 | tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arb… | |
CVE-2001-1374 | | 2001-07-19 | expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse li… | |
CVE-2001-1367 | | 2001-07-19 | The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which cou… | |
CVE-2001-1366 | | 2001-07-19 | netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information. | |
CVE-2001-1365 | | 2001-07-19 | Vulnerability in IntraGnat before 1.4. | |
CVE-2001-1364 | | 2001-07-19 | Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified. | |
CVE-2001-1363 | | 2001-07-19 | Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges. | |
CVE-2001-1362 | | 2001-07-19 | Vulnerability in the server for nPULSE before 0.53p4. | |
CVE-2001-1361 | | 2001-07-19 | Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links. | |
CVE-2001-1360 | | 2001-07-19 | Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned. | |
CVE-2001-1264 | | 2001-07-19 | Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges. | |
CVE-2001-1172 | | 2001-07-19 | OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file. | |
CVE-2001-1373 | | 2001-07-18 | MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote at… | |
CVE-2001-1303 | | 2001-07-18 | The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected netw… | |
CVE-2001-1302 | | 2001-07-18 | The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users… | |
CVE-2001-1030 | | 2001-07-18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings a… | |
CVE-2001-1279 | | 2001-07-17 | Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS R… | |
CVE-2001-1242 | | 2001-07-17 | Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form. | |
CVE-2001-1241 | | 2001-07-17 | Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary com… | |
CVE-2001-1182 | | 2001-07-17 | Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges. | |
CVE-2001-1179 | | 2001-07-17 | xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters. | |
CVE-2001-1177 | | 2001-07-17 | ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | |
CVE-2001-0980 | | 2001-07-17 | docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web pag… | |
CVE-2001-0974 | | 2001-07-17 | Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by… | |
CVE-2001-1321 | | 2001-07-16 | Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid… | |
CVE-2001-1320 | | 2001-07-16 | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encod… | |
CVE-2001-1319 | | 2001-07-16 | Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demons… | |
CVE-2001-1318 | | 2001-07-16 | Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as dem… |