# CVEs published 2001-02-02

45 CVEs were published on February 2, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2000-0889](https://cve.now/CVE-2000-0889.md): Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as applets and make it appear (no CVSS)
- [CVE-2000-0893](https://cve.now/CVE-2000-0893.md): The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to identify the target hos (no CVSS)
- [CVE-2000-1090](https://cve.now/CVE-2000-1090.md): Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses t (no CVSS)
- [CVE-2001-0019](https://cve.now/CVE-2001-0019.md): Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "c (no CVSS)
- [CVE-2001-0022](https://cve.now/CVE-2001-0022.md): simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook (no CVSS)
- [CVE-2001-0023](https://cve.now/CVE-2001-0023.md): everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config p (no CVSS)
- [CVE-2001-0024](https://cve.now/CVE-2001-0024.md): simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail pa (no CVSS)
- [CVE-2001-0025](https://cve.now/CVE-2001-0025.md): ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter. (no CVSS)
- [CVE-2001-0027](https://cve.now/CVE-2001-0027.md): mod\_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authentica (no CVSS)
- [CVE-2001-0029](https://cve.now/CVE-2001-0029.md): Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a lon (no CVSS)
- [CVE-2001-0030](https://cve.now/CVE-2001-0030.md): FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and (no CVSS)
- [CVE-2001-0031](https://cve.now/CVE-2001-0031.md): BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that (no CVSS)
- [CVE-2001-0032](https://cve.now/CVE-2001-0032.md): Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via m (no CVSS)
- [CVE-2001-0037](https://cve.now/CVE-2001-0037.md): Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (no CVSS)
- [CVE-2001-0038](https://cve.now/CVE-2001-0038.md): Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. (no CVSS)
- [CVE-2001-0044](https://cve.now/CVE-2001-0044.md): Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat\_ (no CVSS)
- [CVE-2001-0045](https://cve.now/CVE-2001-0045.md): The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the va (no CVSS)
- [CVE-2001-0046](https://cve.now/CVE-2001-0046.md): The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP (no CVSS)
- [CVE-2001-0047](https://cve.now/CVE-2001-0047.md): The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary (no CVSS)
- [CVE-2001-0048](https://cve.now/CVE-2001-0048.md): The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, whic (no CVSS)
- [CVE-2001-0049](https://cve.now/CVE-2001-0049.md): WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests. (no CVSS)
- [CVE-2001-0051](https://cve.now/CVE-2001-0051.md): IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote attackers to gain acces (no CVSS)
- [CVE-2001-0052](https://cve.now/CVE-2001-0052.md): IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query. (no CVSS)
- [CVE-2001-0064](https://cve.now/CVE-2001-0064.md): Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL termina (no CVSS)
- [CVE-2001-0065](https://cve.now/CVE-2001-0065.md): Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE (no CVSS)
- [CVE-2001-0067](https://cve.now/CVE-2001-0067.md): The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to read other users' Palm (no CVSS)
- [CVE-2001-0068](https://cve.now/CVE-2001-0068.md): Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the A (no CVSS)
- [CVE-2001-0070](https://cve.now/CVE-2001-0070.md): Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (no CVSS)
- [CVE-2001-0073](https://cve.now/CVE-2001-0073.md): Buffer overflow in the find\_default\_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers to modify critical (no CVSS)
- [CVE-2001-0074](https://cve.now/CVE-2001-0074.md): Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0075](https://cve.now/CVE-2001-0075.md): Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0076](https://cve.now/CVE-2001-0076.md): register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND\_MAIL parameter, which overwr (no CVSS)
- [CVE-2001-0079](https://cve.now/CVE-2001-0079.md): Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool\_stat.txt log (no CVSS)
- [CVE-2001-0082](https://cve.now/CVE-2001-0082.md): Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented p (no CVSS)
- [CVE-2001-0084](https://cve.now/CVE-2001-0084.md): GTK+ library allows local users to specify arbitrary modules via the GTK\_MODULES environmental variable, which could allow local users to ga (no CVSS)
- [CVE-2001-0086](https://cve.now/CVE-2001-0086.md): CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by (no CVSS)
- [CVE-2001-0087](https://cve.now/CVE-2001-0087.md): itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which allows local users t (no CVSS)
- [CVE-2001-0088](https://cve.now/CVE-2001-0088.md): common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password to a single character, (no CVSS)
- [CVE-2001-0093](https://cve.now/CVE-2001-0093.md): Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect (no CVSS)
- [CVE-2001-0097](https://cve.now/CVE-2001-0097.md): The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST r (no CVSS)
- [CVE-2001-0098](https://cve.now/CVE-2001-0098.md): Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a (no CVSS)
- [CVE-2001-0101](https://cve.now/CVE-2001-0101.md): Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command. (no CVSS)
- [CVE-2001-0102](https://cve.now/CVE-2001-0102.md): "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effe (no CVSS)
- [CVE-2001-0103](https://cve.now/CVE-2001-0103.md): CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to eas (no CVSS)
- [CVE-2001-0104](https://cve.now/CVE-2001-0104.md): MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-02-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.