cve.nowby Sazabi

CVEs published April 4, 2001

45 CVEs were published on April 4, 2001: 0 critical, 0 high.

Published: 45
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 45
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 45

CVE-2001-0145Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malUnratedApr 4, 2001
CVE-2001-0250The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the webUnratedApr 4, 2001
CVE-2001-0251The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.UnratedApr 4, 2001
CVE-2001-0253Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories UnratedApr 4, 2001
CVE-2001-0254FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.UnratedApr 4, 2001
CVE-2001-0255FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter namUnratedApr 4, 2001
CVE-2001-0256FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long usernameUnratedApr 4, 2001
CVE-2001-0257Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commaUnratedApr 4, 2001
CVE-2001-0258The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large numbeUnratedApr 4, 2001
CVE-2001-0261Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker toUnratedApr 4, 2001
CVE-2001-0270Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformeUnratedApr 4, 2001
CVE-2001-0271mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.UnratedApr 4, 2001
CVE-2001-0272Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via UnratedApr 4, 2001
CVE-2001-0273pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu PrivacUnratedApr 4, 2001
CVE-2001-0275Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTPUnratedApr 4, 2001
CVE-2001-0277Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbUnratedApr 4, 2001
CVE-2001-0281Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessUnratedApr 4, 2001
CVE-2001-0282SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.UnratedApr 4, 2001
CVE-2001-0283Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via ..UnratedApr 4, 2001
CVE-2001-0285Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a loUnratedApr 4, 2001
CVE-2001-0286Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a ..UnratedApr 4, 2001
CVE-2001-0291Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that containUnratedApr 4, 2001
CVE-2001-0292PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling uUnratedApr 4, 2001
CVE-2001-0293Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a ..UnratedApr 4, 2001
CVE-2001-0294Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a ..UnratedApr 4, 2001
CVE-2001-0296Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.UnratedApr 4, 2001
CVE-2001-0297Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files vUnratedApr 4, 2001
CVE-2001-0298Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via aUnratedApr 4, 2001
CVE-2001-0300oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local usersUnratedApr 4, 2001
CVE-2001-0302Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrUnratedApr 4, 2001
CVE-2001-0303tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-eUnratedApr 4, 2001
CVE-2001-0304Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL requeUnratedApr 4, 2001
CVE-2001-0305Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a ..UnratedApr 4, 2001
CVE-2001-0306Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a ..UnratedApr 4, 2001
CVE-2001-0307Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in aUnratedApr 4, 2001
CVE-2001-0308UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by UnratedApr 4, 2001
CVE-2001-0312IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contaUnratedApr 4, 2001
CVE-2001-0313Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public netwUnratedApr 4, 2001
CVE-2001-0314Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute UnratedApr 4, 2001
CVE-2001-0315The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.UnratedApr 4, 2001
CVE-2001-0320bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by iUnratedApr 4, 2001
CVE-2001-0322MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crashUnratedApr 4, 2001
CVE-2001-0323The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP FrUnratedApr 4, 2001
CVE-2001-0324Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UnratedApr 4, 2001
CVE-2001-0325Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large numUnratedApr 4, 2001