cve.nowby Sazabi

CVEs published February 2, 2001

45 CVEs were published on February 2, 2001: 0 critical, 0 high.

Published: 45
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 45
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 45

CVE-2000-0889Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appearUnratedFeb 2, 2001
CVE-2000-0893The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target hosUnratedFeb 2, 2001
CVE-2000-1090Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses tUnratedFeb 2, 2001
CVE-2001-0019Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "cUnratedFeb 2, 2001
CVE-2001-0022simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbookUnratedFeb 2, 2001
CVE-2001-0023everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config pUnratedFeb 2, 2001
CVE-2001-0024simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail paUnratedFeb 2, 2001
CVE-2001-0025ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.UnratedFeb 2, 2001
CVE-2001-0027mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticaUnratedFeb 2, 2001
CVE-2001-0029Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a lonUnratedFeb 2, 2001
CVE-2001-0030FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and UnratedFeb 2, 2001
CVE-2001-0031BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name thatUnratedFeb 2, 2001
CVE-2001-0032Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via mUnratedFeb 2, 2001
CVE-2001-0037Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing ..UnratedFeb 2, 2001
CVE-2001-0038Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g.UnratedFeb 2, 2001
CVE-2001-0044Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_UnratedFeb 2, 2001
CVE-2001-0045The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the vaUnratedFeb 2, 2001
CVE-2001-0046The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP UnratedFeb 2, 2001
CVE-2001-0047The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary UnratedFeb 2, 2001
CVE-2001-0048The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, whicUnratedFeb 2, 2001
CVE-2001-0049WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.UnratedFeb 2, 2001
CVE-2001-0051IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain accesUnratedFeb 2, 2001
CVE-2001-0052IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.UnratedFeb 2, 2001
CVE-2001-0064Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminaUnratedFeb 2, 2001
CVE-2001-0065Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITEUnratedFeb 2, 2001
CVE-2001-0067The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' PalmUnratedFeb 2, 2001
CVE-2001-0068Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the AUnratedFeb 2, 2001
CVE-2001-0070Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, viaUnratedFeb 2, 2001
CVE-2001-0073Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers to modify critical UnratedFeb 2, 2001
CVE-2001-0074Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a ..UnratedFeb 2, 2001
CVE-2001-0075Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a ..UnratedFeb 2, 2001
CVE-2001-0076register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrUnratedFeb 2, 2001
CVE-2001-0079Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log UnratedFeb 2, 2001
CVE-2001-0082Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented pUnratedFeb 2, 2001
CVE-2001-0084GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gaUnratedFeb 2, 2001
CVE-2001-0086CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication byUnratedFeb 2, 2001
CVE-2001-0087itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users tUnratedFeb 2, 2001
CVE-2001-0088common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character,UnratedFeb 2, 2001
CVE-2001-0093Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affectUnratedFeb 2, 2001
CVE-2001-0097The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST rUnratedFeb 2, 2001
CVE-2001-0098Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a UnratedFeb 2, 2001
CVE-2001-0101Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.UnratedFeb 2, 2001
CVE-2001-0102"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effeUnratedFeb 2, 2001
CVE-2001-0103CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easUnratedFeb 2, 2001
CVE-2001-0104MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password UnratedFeb 2, 2001