# CVEs published 2001-04-04

45 CVEs were published on April 4, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0145](https://cve.now/CVE-2001-0145.md): Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a mal (no CVSS)
- [CVE-2001-0250](https://cve.now/CVE-2001-0250.md): The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web (no CVSS)
- [CVE-2001-0251](https://cve.now/CVE-2001-0251.md): The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command. (no CVSS)
- [CVE-2001-0253](https://cve.now/CVE-2001-0253.md): Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories (no CVSS)
- [CVE-2001-0254](https://cve.now/CVE-2001-0254.md): FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command. (no CVSS)
- [CVE-2001-0255](https://cve.now/CVE-2001-0255.md): FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter nam (no CVSS)
- [CVE-2001-0256](https://cve.now/CVE-2001-0256.md): FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username (no CVSS)
- [CVE-2001-0257](https://cve.now/CVE-2001-0257.md): Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary comma (no CVSS)
- [CVE-2001-0258](https://cve.now/CVE-2001-0258.md): The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large numbe (no CVSS)
- [CVE-2001-0261](https://cve.now/CVE-2001-0261.md): Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to (no CVSS)
- [CVE-2001-0270](https://cve.now/CVE-2001-0270.md): Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malforme (no CVSS)
- [CVE-2001-0271](https://cve.now/CVE-2001-0271.md): mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters. (no CVSS)
- [CVE-2001-0272](https://cve.now/CVE-2001-0272.md): Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2001-0273](https://cve.now/CVE-2001-0273.md): pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privac (no CVSS)
- [CVE-2001-0275](https://cve.now/CVE-2001-0275.md): Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP (no CVSS)
- [CVE-2001-0277](https://cve.now/CVE-2001-0277.md): Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arb (no CVSS)
- [CVE-2001-0281](https://cve.now/CVE-2001-0281.md): Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMess (no CVSS)
- [CVE-2001-0282](https://cve.now/CVE-2001-0282.md): SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. (no CVSS)
- [CVE-2001-0283](https://cve.now/CVE-2001-0283.md): Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (no CVSS)
- [CVE-2001-0285](https://cve.now/CVE-2001-0285.md): Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a lo (no CVSS)
- [CVE-2001-0286](https://cve.now/CVE-2001-0286.md): Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0291](https://cve.now/CVE-2001-0291.md): Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contain (no CVSS)
- [CVE-2001-0292](https://cve.now/CVE-2001-0292.md): PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling u (no CVSS)
- [CVE-2001-0293](https://cve.now/CVE-2001-0293.md): Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0294](https://cve.now/CVE-2001-0294.md): Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (no CVSS)
- [CVE-2001-0296](https://cve.now/CVE-2001-0296.md): Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. (no CVSS)
- [CVE-2001-0297](https://cve.now/CVE-2001-0297.md): Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2001-0298](https://cve.now/CVE-2001-0298.md): Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a (no CVSS)
- [CVE-2001-0300](https://cve.now/CVE-2001-0300.md): oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users (no CVSS)
- [CVE-2001-0302](https://cve.now/CVE-2001-0302.md): Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitr (no CVSS)
- [CVE-2001-0303](https://cve.now/CVE-2001-0303.md): tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-e (no CVSS)
- [CVE-2001-0304](https://cve.now/CVE-2001-0304.md): Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\\.." (dot dot) in a URL reque (no CVSS)
- [CVE-2001-0305](https://cve.now/CVE-2001-0305.md): Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0306](https://cve.now/CVE-2001-0306.md): Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0307](https://cve.now/CVE-2001-0307.md): Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in a (no CVSS)
- [CVE-2001-0308](https://cve.now/CVE-2001-0308.md): UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by (no CVSS)
- [CVE-2001-0312](https://cve.now/CVE-2001-0312.md): IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that conta (no CVSS)
- [CVE-2001-0313](https://cve.now/CVE-2001-0313.md): Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public netw (no CVSS)
- [CVE-2001-0314](https://cve.now/CVE-2001-0314.md): Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute (no CVSS)
- [CVE-2001-0315](https://cve.now/CVE-2001-0315.md): The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key. (no CVSS)
- [CVE-2001-0320](https://cve.now/CVE-2001-0320.md): bb\_smilies.php and bbcode\_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by i (no CVSS)
- [CVE-2001-0322](https://cve.now/CVE-2001-0322.md): MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash (no CVSS)
- [CVE-2001-0323](https://cve.now/CVE-2001-0323.md): The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fr (no CVSS)
- [CVE-2001-0324](https://cve.now/CVE-2001-0324.md): Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of (no CVSS)
- [CVE-2001-0325](https://cve.now/CVE-2001-0325.md): Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large num (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.