CVEs published May 7, 2001
201 CVEs were published on May 7, 2001: 0 critical, 0 high.
- Published
- 201
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 201
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 201
- CVE-1999-0115AIX bugfiler program allows local users to gain root access.
- CVE-1999-0223Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
- CVE-1999-0268MetaInfo MetaWeb web server allows users to upload, execute, and read scripts.
- CVE-1999-0608An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information.
- CVE-1999-0681Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers
- CVE-1999-0729Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.
- CVE-1999-0758Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script
- CVE-1999-0760Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.
- CVE-1999-0800The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
- CVE-1999-0922An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
- CVE-1999-0924The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.
- CVE-1999-0945Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via
- CVE-2000-0120The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
- CVE-2000-0302Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile
- CVE-2000-0306Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
- CVE-2000-0307Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevent
- CVE-2000-0308Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 all
- CVE-2000-0309The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
- CVE-2000-0310IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets.
- CVE-2000-0313Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations.
- CVE-2000-0314traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) op
- CVE-2000-0315traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be use
- CVE-2000-0348A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo
- CVE-2000-0349Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.
- CVE-2000-0351Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
- CVE-2000-0368Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users
- CVE-2000-0375The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files.
- CVE-2000-0504libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP
- CVE-2000-0541The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command.
- CVE-2000-0573The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec
- CVE-2000-0577Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a ..
- CVE-2000-0622Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands
- CVE-2000-0650The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade di
- CVE-2000-0693pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to
- CVE-2000-0694pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack.
- CVE-2000-0717GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.
- CVE-2000-0720news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attac
- CVE-2000-0726CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ h
- CVE-2000-0731Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a ..
- CVE-2000-0742The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet
- CVE-2000-0803GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by i
- CVE-2000-0816Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
- CVE-2000-0818The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appen
- CVE-2000-0829The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by
- CVE-2000-0854When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi
- CVE-2000-0856Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long
- CVE-2000-0874Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
- CVE-2000-0875WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.
- CVE-2000-0876WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an erro
- CVE-2000-0890periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a
- CVE-2000-0896WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewal
- CVE-2000-0927WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quo
- CVE-2000-0964Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and pos
- CVE-2000-1075Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arb
- CVE-2000-1108cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local
- CVE-2000-1109Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows o
- CVE-2000-1119Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.
- CVE-2000-1121Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.
- CVE-2000-1122Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.
- CVE-2000-1123Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands.
- CVE-2000-1124Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.
- CVE-2000-1164WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows us
- CVE-2000-1165Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a
- CVE-2000-1170Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
- CVE-2000-1171Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a ..
- CVE-2000-1174Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a pack
- CVE-2000-1180Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line ar
- CVE-2001-0002Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Loca
- CVE-2001-0003Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settin
- CVE-2001-0005Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
- CVE-2001-0006The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to mo
- CVE-2001-0008Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
- CVE-2001-0009Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a ..
- CVE-2001-0010Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
- CVE-2001-0011Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
- CVE-2001-0012BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
- CVE-2001-0013Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
- CVE-2001-0014Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker
- CVE-2001-0015Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible
- CVE-2001-0016NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local user
- CVE-2001-0017Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf
- CVE-2001-0021MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template
- CVE-2001-0026rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP
- CVE-2001-0028Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands vi
- CVE-2001-0033KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an altern
- CVE-2001-0034KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false prox
- CVE-2001-0035Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execut
- CVE-2001-0036KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.
- CVE-2001-0039IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user passw
- CVE-2001-0040APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying
- CVE-2001-0041Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of fail
- CVE-2001-0043phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_info
- CVE-2001-0050Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP
- CVE-2001-0053One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
- CVE-2001-0054Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appen
- CVE-2001-0055CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets.
- CVE-2001-0056The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to g
- CVE-2001-0057Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.
- CVE-2001-0058The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that doe
- CVE-2001-0059patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0060Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
- CVE-2001-0061procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows loca
- CVE-2001-0062procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own m
- CVE-2001-0063procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and g
- CVE-2001-0066Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memo
- CVE-2001-0069dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0071gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a fi
- CVE-2001-0072gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the p
- CVE-2001-0080Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-
- CVE-2001-0081swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could al
- CVE-2001-0083Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memor
- CVE-2001-0085Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly exe
- CVE-2001-0089Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form
- CVE-2001-0090The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow
- CVE-2001-0091The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows
- CVE-2001-0092A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remot
- CVE-2001-0096FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Ma
- CVE-2001-0099bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
- CVE-2001-0100bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
- CVE-2001-0105Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.
- CVE-2001-0106Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a s
- CVE-2001-0109rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
- CVE-2001-0110Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.
- CVE-2001-0111Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
- CVE-2001-0115Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.
- CVE-2001-0116gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0117sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
- CVE-2001-0118rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0119getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0120useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0123Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a ..
- CVE-2001-0124Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
- CVE-2001-0125exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
- CVE-2001-0126Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another sou
- CVE-2001-0128Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges
- CVE-2001-0129Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar
- CVE-2001-0130Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a
- CVE-2001-0137Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a s
- CVE-2001-0138privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0139inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- CVE-2001-0140arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- CVE-2001-0141mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- CVE-2001-0142squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
- CVE-2001-0143vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
- CVE-2001-0144CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in
- CVE-2001-0147Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly
- CVE-2001-0148The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a va
- CVE-2001-0149Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript fun
- CVE-2001-0150Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allo
- CVE-2001-0151IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
- CVE-2001-0152The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fi
- CVE-2001-0153Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitra
- CVE-2001-0154HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the att
- CVE-2001-0157Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access
- CVE-2001-0165Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) a
- CVE-2001-0166Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specif
- CVE-2001-0169When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.
- CVE-2001-0170glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing se
- CVE-2001-0178kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows
- CVE-2001-0179Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a mal
- CVE-2001-0183ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, whi
- CVE-2001-0185Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to
- CVE-2001-0187Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary
- CVE-2001-0190Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by ex
- CVE-2001-0191gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which all
- CVE-2001-0193Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
- CVE-2001-0194Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
- CVE-2001-0195sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain
- CVE-2001-0196inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 by
- CVE-2001-0197Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
- CVE-2001-0218Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
- CVE-2001-0219Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
- CVE-2001-0221Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
- CVE-2001-0222webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
- CVE-2001-0230Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.
- CVE-2001-0233Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary comman
- CVE-2001-0234NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter
- CVE-2001-0259ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, w
- CVE-2001-0260Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a l
- CVE-2001-0266Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
- CVE-2001-0267NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
- CVE-2001-0268The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not va
- CVE-2001-0274kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
- CVE-2001-0278Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
- CVE-2001-0279Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
- CVE-2001-0284Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possi
- CVE-2001-0287VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltsta
- CVE-2001-0288Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attacke
- CVE-2001-0289Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain pr
- CVE-2001-0290Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.
- CVE-2001-0295Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *
- CVE-2001-0299Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute a
- CVE-2001-0301Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large st
- CVE-2001-0309inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attacke
- CVE-2001-0310sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle
- CVE-2001-0311Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.
- CVE-2001-0316Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.
- CVE-2001-0317Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running set
- CVE-2001-0318Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usin
- CVE-2001-0319orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn opt
- CVE-2001-0326Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arb