# CVEs published 2001-03-09

39 CVEs were published on March 9, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0146](https://cve.now/CVE-2001-0146.md): IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a… (no CVSS)
- [CVE-2001-0167](https://cve.now/CVE-2001-0167.md): Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2001-0168](https://cve.now/CVE-2001-0168.md): Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2001-0171](https://cve.now/CVE-2001-0171.md): Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via… (no CVSS)
- [CVE-2001-0172](https://cve.now/CVE-2001-0172.md): Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands… (no CVSS)
- [CVE-2001-0173](https://cve.now/CVE-2001-0173.md): Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote… (no CVSS)
- [CVE-2001-0177](https://cve.now/CVE-2001-0177.md): WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a… (no CVSS)
- [CVE-2001-0180](https://cve.now/CVE-2001-0180.md): Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter. (no CVSS)
- [CVE-2001-0181](https://cve.now/CVE-2001-0181.md): Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute… (no CVSS)
- [CVE-2001-0184](https://cve.now/CVE-2001-0184.md): eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user… (no CVSS)
- [CVE-2001-0186](https://cve.now/CVE-2001-0186.md): Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0188](https://cve.now/CVE-2001-0188.md): GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server… (no CVSS)
- [CVE-2001-0192](https://cve.now/CVE-2001-0192.md): Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions. (no CVSS)
- [CVE-2001-0198](https://cve.now/CVE-2001-0198.md): Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF… (no CVSS)
- [CVE-2001-0199](https://cve.now/CVE-2001-0199.md): Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0200](https://cve.now/CVE-2001-0200.md): HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will… (no CVSS)
- [CVE-2001-0201](https://cve.now/CVE-2001-0201.md): The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute… (no CVSS)
- [CVE-2001-0202](https://cve.now/CVE-2001-0202.md): Picserver web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0205](https://cve.now/CVE-2001-0205.md): Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the… (no CVSS)
- [CVE-2001-0206](https://cve.now/CVE-2001-0206.md): Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (no CVSS)
- [CVE-2001-0208](https://cve.now/CVE-2001-0208.md): MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions… (no CVSS)
- [CVE-2001-0209](https://cve.now/CVE-2001-0209.md): Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and… (no CVSS)
- [CVE-2001-0210](https://cve.now/CVE-2001-0210.md): Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0211](https://cve.now/CVE-2001-0211.md): Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0212](https://cve.now/CVE-2001-0212.md): Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0213](https://cve.now/CVE-2001-0213.md): Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0214](https://cve.now/CVE-2001-0214.md): Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the… (no CVSS)
- [CVE-2001-0216](https://cve.now/CVE-2001-0216.md): PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName… (no CVSS)
- [CVE-2001-0217](https://cve.now/CVE-2001-0217.md): Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0220](https://cve.now/CVE-2001-0220.md): Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges. (no CVSS)
- [CVE-2001-0223](https://cve.now/CVE-2001-0223.md): Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY\_STRING (HTTP GET request). (no CVSS)
- [CVE-2001-0224](https://cve.now/CVE-2001-0224.md): Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter. (no CVSS)
- [CVE-2001-0225](https://cve.now/CVE-2001-0225.md): fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2001-0226](https://cve.now/CVE-2001-0226.md): Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0227](https://cve.now/CVE-2001-0227.md): Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands… (no CVSS)
- [CVE-2001-0228](https://cve.now/CVE-2001-0228.md): Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0229](https://cve.now/CVE-2001-0229.md): Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to… (no CVSS)
- [CVE-2001-0231](https://cve.now/CVE-2001-0231.md): Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0232](https://cve.now/CVE-2001-0232.md): newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2001-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.