# CVEs published 2001-07-27

61 CVEs were published on July 27, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0349](https://cve.now/CVE-2001-0349.md): Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local… (no CVSS)
- [CVE-2001-0350](https://cve.now/CVE-2001-0350.md): Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local… (no CVSS)
- [CVE-2001-0352](https://cve.now/CVE-2001-0352.md): SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it… (no CVSS)
- [CVE-2001-0357](https://cve.now/CVE-2001-0357.md): FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message… (no CVSS)
- [CVE-2001-0498](https://cve.now/CVE-2001-0498.md): Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2001-0499](https://cve.now/CVE-2001-0499.md): Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges… (no CVSS)
- [CVE-2001-0515](https://cve.now/CVE-2001-0515.md): Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large… (no CVSS)
- [CVE-2001-0516](https://cve.now/CVE-2001-0516.md): Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet… (no CVSS)
- [CVE-2001-0519](https://cve.now/CVE-2001-0519.md): Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags… (no CVSS)
- [CVE-2001-0520](https://cve.now/CVE-2001-0520.md): Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts… (no CVSS)
- [CVE-2001-0521](https://cve.now/CVE-2001-0521.md): Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of… (no CVSS)
- [CVE-2001-0523](https://cve.now/CVE-2001-0523.md): eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML… (no CVSS)
- [CVE-2001-0524](https://cve.now/CVE-2001-0524.md): eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to… (no CVSS)
- [CVE-2001-0534](https://cve.now/CVE-2001-0534.md): Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial… (no CVSS)
- [CVE-2001-0555](https://cve.now/CVE-2001-0555.md): ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (no CVSS)
- [CVE-2001-0556](https://cve.now/CVE-2001-0556.md): The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup… (no CVSS)
- [CVE-2001-0557](https://cve.now/CVE-2001-0557.md): T. (no CVSS)
- [CVE-2001-0561](https://cve.now/CVE-2001-0561.md): Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot… (no CVSS)
- [CVE-2001-0562](https://cve.now/CVE-2001-0562.md): a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which… (no CVSS)
- [CVE-2001-0566](https://cve.now/CVE-2001-0566.md): Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when… (no CVSS)
- [CVE-2001-0568](https://cve.now/CVE-2001-0568.md): Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter… (no CVSS)
- [CVE-2001-0569](https://cve.now/CVE-2001-0569.md): Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2)… (no CVSS)
- [CVE-2001-0570](https://cve.now/CVE-2001-0570.md): minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks. (no CVSS)
- [CVE-2001-0571](https://cve.now/CVE-2001-0571.md): Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4… (no CVSS)
- [CVE-2001-0572](https://cve.now/CVE-2001-0572.md): The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote… (no CVSS)
- [CVE-2001-0575](https://cve.now/CVE-2001-0575.md): Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to… (no CVSS)
- [CVE-2001-0576](https://cve.now/CVE-2001-0576.md): lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow… (no CVSS)
- [CVE-2001-0577](https://cve.now/CVE-2001-0577.md): recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the… (no CVSS)
- [CVE-2001-0578](https://cve.now/CVE-2001-0578.md): Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument… (no CVSS)
- [CVE-2001-0579](https://cve.now/CVE-2001-0579.md): lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first… (no CVSS)
- [CVE-2001-0580](https://cve.now/CVE-2001-0580.md): Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070… (no CVSS)
- [CVE-2001-0581](https://cve.now/CVE-2001-0581.md): Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port… (no CVSS)
- [CVE-2001-0582](https://cve.now/CVE-2001-0582.md): Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or… (no CVSS)
- [CVE-2001-0583](https://cve.now/CVE-2001-0583.md): Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as… (no CVSS)
- [CVE-2001-0584](https://cve.now/CVE-2001-0584.md): IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE… (no CVSS)
- [CVE-2001-0587](https://cve.now/CVE-2001-0587.md): deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in… (no CVSS)
- [CVE-2001-0588](https://cve.now/CVE-2001-0588.md): sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional… (no CVSS)
- [CVE-2001-0592](https://cve.now/CVE-2001-0592.md): Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (\>10,000) of… (no CVSS)
- [CVE-2001-0597](https://cve.now/CVE-2001-0597.md): Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords… (no CVSS)
- [CVE-2001-0598](https://cve.now/CVE-2001-0598.md): Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (\> 45Kb) amounts of data to the… (no CVSS)
- [CVE-2001-0599](https://cve.now/CVE-2001-0599.md): Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to… (no CVSS)
- [CVE-2001-0600](https://cve.now/CVE-2001-0600.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP… (no CVSS)
- [CVE-2001-0601](https://cve.now/CVE-2001-0601.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of… (no CVSS)
- [CVE-2001-0602](https://cve.now/CVE-2001-0602.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (\>400) URL requests for DOS devices. (no CVSS)
- [CVE-2001-0603](https://cve.now/CVE-2001-0603.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (\> 10Kb) amounts of… (no CVSS)
- [CVE-2001-0604](https://cve.now/CVE-2001-0604.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (\>8Kb) containing a large number of… (no CVSS)
- [CVE-2001-0605](https://cve.now/CVE-2001-0605.md): Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld… (no CVSS)
- [CVE-2001-0606](https://cve.now/CVE-2001-0606.md): Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of… (no CVSS)
- [CVE-2001-0607](https://cve.now/CVE-2001-0607.md): asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges… (no CVSS)
- [CVE-2001-0608](https://cve.now/CVE-2001-0608.md): HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional… (no CVSS)
- [CVE-2001-0609](https://cve.now/CVE-2001-0609.md): Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed… (no CVSS)
- [CVE-2001-0610](https://cve.now/CVE-2001-0610.md): kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in… (no CVSS)
- [CVE-2001-0614](https://cve.now/CVE-2001-0614.md): Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially… (no CVSS)
- [CVE-2001-0617](https://cve.now/CVE-2001-0617.md): Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote… (no CVSS)
- [CVE-2001-0618](https://cve.now/CVE-2001-0618.md): Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy… (no CVSS)
- [CVE-2001-0619](https://cve.now/CVE-2001-0619.md): The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. (no CVSS)
- [CVE-2001-0620](https://cve.now/CVE-2001-0620.md): iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read… (no CVSS)
- [CVE-2001-0623](https://cve.now/CVE-2001-0623.md): sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when… (no CVSS)
- [CVE-2001-0624](https://cve.now/CVE-2001-0624.md): QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. (no CVSS)
- [CVE-2001-0632](https://cve.now/CVE-2001-0632.md): Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a… (no CVSS)
- [CVE-2001-0633](https://cve.now/CVE-2001-0633.md): Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2001-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.