# CVEs published 2001-03-09

39 CVEs were published on March 9, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0146](https://cve.now/CVE-2001-0146.md): IIS 5.0 and Microsoft Exchange 2000 allow remote attackers to cause a denial of service (memory allocation error) by repeatedly sending a se (no CVSS)
- [CVE-2001-0167](https://cve.now/CVE-2001-0167.md): Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2001-0168](https://cve.now/CVE-2001-0168.md): Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2001-0171](https://cve.now/CVE-2001-0171.md): Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a (no CVSS)
- [CVE-2001-0172](https://cve.now/CVE-2001-0172.md): Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by (no CVSS)
- [CVE-2001-0173](https://cve.now/CVE-2001-0173.md): Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers (no CVSS)
- [CVE-2001-0177](https://cve.now/CVE-2001-0177.md): WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a se (no CVSS)
- [CVE-2001-0180](https://cve.now/CVE-2001-0180.md): Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter. (no CVSS)
- [CVE-2001-0181](https://cve.now/CVE-2001-0181.md): Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2001-0184](https://cve.now/CVE-2001-0184.md): eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user view (no CVSS)
- [CVE-2001-0186](https://cve.now/CVE-2001-0186.md): Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0188](https://cve.now/CVE-2001-0188.md): GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, w (no CVSS)
- [CVE-2001-0192](https://cve.now/CVE-2001-0192.md): Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions. (no CVSS)
- [CVE-2001-0198](https://cve.now/CVE-2001-0198.md): Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter (no CVSS)
- [CVE-2001-0199](https://cve.now/CVE-2001-0199.md): Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0200](https://cve.now/CVE-2001-0200.md): HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will lis (no CVSS)
- [CVE-2001-0201](https://cve.now/CVE-2001-0201.md): The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute ar (no CVSS)
- [CVE-2001-0202](https://cve.now/CVE-2001-0202.md): Picserver web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0205](https://cve.now/CVE-2001-0205.md): Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the r (no CVSS)
- [CVE-2001-0206](https://cve.now/CVE-2001-0206.md): Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (no CVSS)
- [CVE-2001-0208](https://cve.now/CVE-2001-0208.md): MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, wh (no CVSS)
- [CVE-2001-0209](https://cve.now/CVE-2001-0209.md): Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibl (no CVSS)
- [CVE-2001-0210](https://cve.now/CVE-2001-0210.md): Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0211](https://cve.now/CVE-2001-0211.md): Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0212](https://cve.now/CVE-2001-0212.md): Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0213](https://cve.now/CVE-2001-0213.md): Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0214](https://cve.now/CVE-2001-0214.md): Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the fil (no CVSS)
- [CVE-2001-0216](https://cve.now/CVE-2001-0216.md): PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName para (no CVSS)
- [CVE-2001-0217](https://cve.now/CVE-2001-0217.md): Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0220](https://cve.now/CVE-2001-0220.md): Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges. (no CVSS)
- [CVE-2001-0223](https://cve.now/CVE-2001-0223.md): Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY\_STRING (HTTP GET request). (no CVSS)
- [CVE-2001-0224](https://cve.now/CVE-2001-0224.md): Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter. (no CVSS)
- [CVE-2001-0225](https://cve.now/CVE-2001-0225.md): fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2001-0226](https://cve.now/CVE-2001-0226.md): Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0227](https://cve.now/CVE-2001-0227.md): Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via (no CVSS)
- [CVE-2001-0228](https://cve.now/CVE-2001-0228.md): Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0229](https://cve.now/CVE-2001-0229.md): Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to ga (no CVSS)
- [CVE-2001-0231](https://cve.now/CVE-2001-0231.md): Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0232](https://cve.now/CVE-2001-0232.md): newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.