# CVEs published 2001-05-07

201 CVEs were published on May 7, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0115](https://cve.now/CVE-1999-0115.md): AIX bugfiler program allows local users to gain root access. (no CVSS)
- [CVE-1999-0223](https://cve.now/CVE-1999-0223.md): Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. (no CVSS)
- [CVE-1999-0268](https://cve.now/CVE-1999-0268.md): MetaInfo MetaWeb web server allows users to upload, execute, and read scripts. (no CVSS)
- [CVE-1999-0608](https://cve.now/CVE-1999-0608.md): An incorrect configuration of the PDG Shopping Cart CGI program "shopper.cgi" could disclose private information. (no CVSS)
- [CVE-1999-0681](https://cve.now/CVE-1999-0681.md): Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers (no CVSS)
- [CVE-1999-0729](https://cve.now/CVE-1999-0729.md): Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap\_search request. (no CVSS)
- [CVE-1999-0758](https://cve.now/CVE-1999-0758.md): Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script (no CVSS)
- [CVE-1999-0760](https://cve.now/CVE-1999-0760.md): Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. (no CVSS)
- [CVE-1999-0800](https://cve.now/CVE-1999-0800.md): The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm. (no CVSS)
- [CVE-1999-0922](https://cve.now/CVE-1999-0922.md): An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. (no CVSS)
- [CVE-1999-0924](https://cve.now/CVE-1999-0924.md): The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. (no CVSS)
- [CVE-1999-0945](https://cve.now/CVE-1999-0945.md): Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via (no CVSS)
- [CVE-2000-0120](https://cve.now/CVE-2000-0120.md): The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter. (no CVSS)
- [CVE-2000-0302](https://cve.now/CVE-2000-0302.md): Microsoft Index Server allows remote attackers to view the source code of ASP files by appending a %20 to the filename in the CiWebHitsFile (no CVSS)
- [CVE-2000-0306](https://cve.now/CVE-2000-0306.md): Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message. (no CVSS)
- [CVE-2000-0307](https://cve.now/CVE-2000-0307.md): Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevent (no CVSS)
- [CVE-2000-0308](https://cve.now/CVE-2000-0308.md): Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 all (no CVSS)
- [CVE-2000-0309](https://cve.now/CVE-2000-0309.md): The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. (no CVSS)
- [CVE-2000-0310](https://cve.now/CVE-2000-0310.md): IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets. (no CVSS)
- [CVE-2000-0313](https://cve.now/CVE-2000-0313.md): Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations. (no CVSS)
- [CVE-2000-0314](https://cve.now/CVE-2000-0314.md): traceroute in NetBSD 1.3.3 and Linux systems allows local users to flood other systems by providing traceroute with a large waittime (-w) op (no CVSS)
- [CVE-2000-0315](https://cve.now/CVE-2000-0315.md): traceroute in NetBSD 1.3.3 and Linux systems allows local unprivileged users to modify the source address of the packets, which could be use (no CVSS)
- [CVE-2000-0348](https://cve.now/CVE-2000-0348.md): A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo (no CVSS)
- [CVE-2000-0349](https://cve.now/CVE-2000-0349.md): Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service. (no CVSS)
- [CVE-2000-0351](https://cve.now/CVE-2000-0351.md): Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. (no CVSS)
- [CVE-2000-0368](https://cve.now/CVE-2000-0368.md): Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users (no CVSS)
- [CVE-2000-0375](https://cve.now/CVE-2000-0375.md): The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. (no CVSS)
- [CVE-2000-0504](https://cve.now/CVE-2000-0504.md): libICE in XFree86 allows remote attackers to cause a denial of service by specifying a large value which is not properly checked by the SKIP (no CVSS)
- [CVE-2000-0541](https://cve.now/CVE-2000-0541.md): The Panda Antivirus console on port 2001 allows local users to execute arbitrary commands without authentication via the CMD command. (no CVSS)
- [CVE-2000-0573](https://cve.now/CVE-2000-0573.md): The lreply function in wu-ftpd 2.6.0 and earlier does not properly cleanse an untrusted format string, which allows remote attackers to exec (no CVSS)
- [CVE-2000-0577](https://cve.now/CVE-2000-0577.md): Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0622](https://cve.now/CVE-2000-0622.md): Buffer overflow in Webfind CGI program in O'Reilly WebSite Professional web server 2.x allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2000-0650](https://cve.now/CVE-2000-0650.md): The default installation of VirusScan 4.5 and NetShield 4.5 has insecure permissions for the registry key that identifies the AutoUpgrade di (no CVSS)
- [CVE-2000-0693](https://cve.now/CVE-2000-0693.md): pgxconfig in the Raptor GFX configuration tool uses a relative path name for a system call to the "cp" program, which allows local users to (no CVSS)
- [CVE-2000-0694](https://cve.now/CVE-2000-0694.md): pgxconfig in the Raptor GFX configuration tool allows local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0717](https://cve.now/CVE-2000-0717.md): GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands. (no CVSS)
- [CVE-2000-0720](https://cve.now/CVE-2000-0720.md): news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attac (no CVSS)
- [CVE-2000-0726](https://cve.now/CVE-2000-0726.md): CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ h (no CVSS)
- [CVE-2000-0731](https://cve.now/CVE-2000-0731.md): Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0742](https://cve.now/CVE-2000-0742.md): The IPX protocol implementation in Microsoft Windows 95 and 98 allows remote attackers to cause a denial of service by sending a ping packet (no CVSS)
- [CVE-2000-0803](https://cve.now/CVE-2000-0803.md): GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by i (no CVSS)
- [CVE-2000-0816](https://cve.now/CVE-2000-0816.md): Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters. (no CVSS)
- [CVE-2000-0818](https://cve.now/CVE-2000-0818.md): The default installation for the Oracle listener program 7.3.4, 8.0.6, and 8.1.6 allows an attacker to cause logging information to be appen (no CVSS)
- [CVE-2000-0829](https://cve.now/CVE-2000-0829.md): The tmpwatch utility in Red Hat Linux forks a new process for each directory level, which allows local users to cause a denial of service by (no CVSS)
- [CVE-2000-0854](https://cve.now/CVE-2000-0854.md): When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi (no CVSS)
- [CVE-2000-0856](https://cve.now/CVE-2000-0856.md): Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long (no CVSS)
- [CVE-2000-0874](https://cve.now/CVE-2000-0874.md): Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF). (no CVSS)
- [CVE-2000-0875](https://cve.now/CVE-2000-0875.md): WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters. (no CVSS)
- [CVE-2000-0876](https://cve.now/CVE-2000-0876.md): WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an erro (no CVSS)
- [CVE-2000-0890](https://cve.now/CVE-2000-0890.md): periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink a (no CVSS)
- [CVE-2000-0896](https://cve.now/CVE-2000-0896.md): WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewal (no CVSS)
- [CVE-2000-0927](https://cve.now/CVE-2000-0927.md): WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quo (no CVSS)
- [CVE-2000-0964](https://cve.now/CVE-2000-0964.md): Buffer overflow in the web administration service for the HiNet LP5100 IP-phone allows remote attackers to cause a denial of service and pos (no CVSS)
- [CVE-2000-1075](https://cve.now/CVE-2000-1075.md): Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arb (no CVSS)
- [CVE-2000-1108](https://cve.now/CVE-2000-1108.md): cons.saver in Midnight Commander (mc) 4.5.42 and earlier does not properly verify if an output file descriptor is a TTY, which allows local (no CVSS)
- [CVE-2000-1109](https://cve.now/CVE-2000-1109.md): Midnight Commander (mc) 4.5.51 and earlier does not properly process malformed directory names when a user opens a directory, which allows o (no CVSS)
- [CVE-2000-1119](https://cve.now/CVE-2000-1119.md): Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument. (no CVSS)
- [CVE-2000-1121](https://cve.now/CVE-2000-1121.md): Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument. (no CVSS)
- [CVE-2000-1122](https://cve.now/CVE-2000-1122.md): Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument. (no CVSS)
- [CVE-2000-1123](https://cve.now/CVE-2000-1123.md): Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands. (no CVSS)
- [CVE-2000-1124](https://cve.now/CVE-2000-1124.md): Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables. (no CVSS)
- [CVE-2000-1164](https://cve.now/CVE-2000-1164.md): WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows us (no CVSS)
- [CVE-2000-1165](https://cve.now/CVE-2000-1165.md): Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a (no CVSS)
- [CVE-2000-1170](https://cve.now/CVE-2000-1170.md): Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request. (no CVSS)
- [CVE-2000-1171](https://cve.now/CVE-2000-1171.md): Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (no CVSS)
- [CVE-2000-1174](https://cve.now/CVE-2000-1174.md): Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a pack (no CVSS)
- [CVE-2000-1180](https://cve.now/CVE-2000-1180.md): Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line ar (no CVSS)
- [CVE-2001-0002](https://cve.now/CVE-2001-0002.md): Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Loca (no CVSS)
- [CVE-2001-0003](https://cve.now/CVE-2001-0003.md): Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settin (no CVSS)
- [CVE-2001-0005](https://cve.now/CVE-2001-0005.md): Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0006](https://cve.now/CVE-2001-0006.md): The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to mo (no CVSS)
- [CVE-2001-0008](https://cve.now/CVE-2001-0008.md): Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures. (no CVSS)
- [CVE-2001-0009](https://cve.now/CVE-2001-0009.md): Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0010](https://cve.now/CVE-2001-0010.md): Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2001-0011](https://cve.now/CVE-2001-0011.md): Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2001-0012](https://cve.now/CVE-2001-0012.md): BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables. (no CVSS)
- [CVE-2001-0013](https://cve.now/CVE-2001-0013.md): Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2001-0014](https://cve.now/CVE-2001-0014.md): Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker (no CVSS)
- [CVE-2001-0015](https://cve.now/CVE-2001-0015.md): Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM\_COPYDATA" message to an invisible (no CVSS)
- [CVE-2001-0016](https://cve.now/CVE-2001-0016.md): NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local user (no CVSS)
- [CVE-2001-0017](https://cve.now/CVE-2001-0017.md): Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf (no CVSS)
- [CVE-2001-0021](https://cve.now/CVE-2001-0021.md): MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate\_template (no CVSS)
- [CVE-2001-0026](https://cve.now/CVE-2001-0026.md): rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP (no CVSS)
- [CVE-2001-0028](https://cve.now/CVE-2001-0028.md): Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2001-0033](https://cve.now/CVE-2001-0033.md): KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an altern (no CVSS)
- [CVE-2001-0034](https://cve.now/CVE-2001-0034.md): KTH Kerberos IV allows local users to specify an alternate proxy using the krb4\_proxy variable, which allows the user to generate false prox (no CVSS)
- [CVE-2001-0035](https://cve.now/CVE-2001-0035.md): Buffer overflow in the kdc\_reply\_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execut (no CVSS)
- [CVE-2001-0036](https://cve.now/CVE-2001-0036.md): KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file. (no CVSS)
- [CVE-2001-0039](https://cve.now/CVE-2001-0039.md): IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user passw (no CVSS)
- [CVE-2001-0040](https://cve.now/CVE-2001-0040.md): APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying (no CVSS)
- [CVE-2001-0041](https://cve.now/CVE-2001-0041.md): Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of fail (no CVSS)
- [CVE-2001-0043](https://cve.now/CVE-2001-0043.md): phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw\_info (no CVSS)
- [CVE-2001-0050](https://cve.now/CVE-2001-0050.md): Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP (no CVSS)
- [CVE-2001-0053](https://cve.now/CVE-2001-0053.md): One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges. (no CVSS)
- [CVE-2001-0054](https://cve.now/CVE-2001-0054.md): Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appen (no CVSS)
- [CVE-2001-0055](https://cve.now/CVE-2001-0055.md): CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of TCP SYN packets. (no CVSS)
- [CVE-2001-0056](https://cve.now/CVE-2001-0056.md): The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to g (no CVSS)
- [CVE-2001-0057](https://cve.now/CVE-2001-0057.md): Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet. (no CVSS)
- [CVE-2001-0058](https://cve.now/CVE-2001-0058.md): The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a URL that doe (no CVSS)
- [CVE-2001-0059](https://cve.now/CVE-2001-0059.md): patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0060](https://cve.now/CVE-2001-0060.md): Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username. (no CVSS)
- [CVE-2001-0061](https://cve.now/CVE-2001-0061.md): procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows loca (no CVSS)
- [CVE-2001-0062](https://cve.now/CVE-2001-0062.md): procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own m (no CVSS)
- [CVE-2001-0063](https://cve.now/CVE-2001-0063.md): procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and g (no CVSS)
- [CVE-2001-0066](https://cve.now/CVE-2001-0066.md): Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memo (no CVSS)
- [CVE-2001-0069](https://cve.now/CVE-2001-0069.md): dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0071](https://cve.now/CVE-2001-0071.md): gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a fi (no CVSS)
- [CVE-2001-0072](https://cve.now/CVE-2001-0072.md): gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the p (no CVSS)
- [CVE-2001-0080](https://cve.now/CVE-2001-0080.md): Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non- (no CVSS)
- [CVE-2001-0081](https://cve.now/CVE-2001-0081.md): swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could al (no CVSS)
- [CVE-2001-0083](https://cve.now/CVE-2001-0083.md): Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memor (no CVSS)
- [CVE-2001-0085](https://cve.now/CVE-2001-0085.md): Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly exe (no CVSS)
- [CVE-2001-0089](https://cve.now/CVE-2001-0089.md): Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form (no CVSS)
- [CVE-2001-0090](https://cve.now/CVE-2001-0090.md): The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow (no CVSS)
- [CVE-2001-0091](https://cve.now/CVE-2001-0091.md): The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows (no CVSS)
- [CVE-2001-0092](https://cve.now/CVE-2001-0092.md): A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remot (no CVSS)
- [CVE-2001-0096](https://cve.now/CVE-2001-0096.md): FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Ma (no CVSS)
- [CVE-2001-0099](https://cve.now/CVE-2001-0099.md): bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address. (no CVSS)
- [CVE-2001-0100](https://cve.now/CVE-2001-0100.md): bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address. (no CVSS)
- [CVE-2001-0105](https://cve.now/CVE-2001-0105.md): Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group. (no CVSS)
- [CVE-2001-0106](https://cve.now/CVE-2001-0106.md): Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a s (no CVSS)
- [CVE-2001-0109](https://cve.now/CVE-2001-0109.md): rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file. (no CVSS)
- [CVE-2001-0110](https://cve.now/CVE-2001-0110.md): Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable. (no CVSS)
- [CVE-2001-0111](https://cve.now/CVE-2001-0111.md): Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument. (no CVSS)
- [CVE-2001-0115](https://cve.now/CVE-2001-0115.md): Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter. (no CVSS)
- [CVE-2001-0116](https://cve.now/CVE-2001-0116.md): gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0117](https://cve.now/CVE-2001-0117.md): sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. (no CVSS)
- [CVE-2001-0118](https://cve.now/CVE-2001-0118.md): rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0119](https://cve.now/CVE-2001-0119.md): getty\_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0120](https://cve.now/CVE-2001-0120.md): useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0123](https://cve.now/CVE-2001-0123.md): Directory traversal vulnerability in eXtropia bbs\_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0124](https://cve.now/CVE-2001-0124.md): Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument. (no CVSS)
- [CVE-2001-0125](https://cve.now/CVE-2001-0125.md): exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file. (no CVSS)
- [CVE-2001-0126](https://cve.now/CVE-2001-0126.md): Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another sou (no CVSS)
- [CVE-2001-0128](https://cve.now/CVE-2001-0128.md): Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges (no CVSS)
- [CVE-2001-0129](https://cve.now/CVE-2001-0129.md): Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar (no CVSS)
- [CVE-2001-0130](https://cve.now/CVE-2001-0130.md): Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote attackers to cause a (no CVSS)
- [CVE-2001-0137](https://cve.now/CVE-2001-0137.md): Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a s (no CVSS)
- [CVE-2001-0138](https://cve.now/CVE-2001-0138.md): privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0139](https://cve.now/CVE-2001-0139.md): inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. (no CVSS)
- [CVE-2001-0140](https://cve.now/CVE-2001-0140.md): arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. (no CVSS)
- [CVE-2001-0141](https://cve.now/CVE-2001-0141.md): mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations. (no CVSS)
- [CVE-2001-0142](https://cve.now/CVE-2001-0142.md): squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. (no CVSS)
- [CVE-2001-0143](https://cve.now/CVE-2001-0143.md): vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0144](https://cve.now/CVE-2001-0144.md): CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in (no CVSS)
- [CVE-2001-0147](https://cve.now/CVE-2001-0147.md): Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly (no CVSS)
- [CVE-2001-0148](https://cve.now/CVE-2001-0148.md): The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a va (no CVSS)
- [CVE-2001-0149](https://cve.now/CVE-2001-0149.md): Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript fun (no CVSS)
- [CVE-2001-0150](https://cve.now/CVE-2001-0150.md): Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allo (no CVSS)
- [CVE-2001-0151](https://cve.now/CVE-2001-0151.md): IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests. (no CVSS)
- [CVE-2001-0152](https://cve.now/CVE-2001-0152.md): The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a fi (no CVSS)
- [CVE-2001-0153](https://cve.now/CVE-2001-0153.md): Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitra (no CVSS)
- [CVE-2001-0154](https://cve.now/CVE-2001-0154.md): HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the att (no CVSS)
- [CVE-2001-0157](https://cve.now/CVE-2001-0157.md): Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access (no CVSS)
- [CVE-2001-0165](https://cve.now/CVE-2001-0165.md): Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) a (no CVSS)
- [CVE-2001-0166](https://cve.now/CVE-2001-0166.md): Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specif (no CVSS)
- [CVE-2001-0169](https://cve.now/CVE-2001-0169.md): When using the LD\_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so. (no CVSS)
- [CVE-2001-0170](https://cve.now/CVE-2001-0170.md): glibc 2.1.9x and earlier does not properly clear the RESOLV\_HOST\_CONF, HOSTALIASES, or RES\_OPTIONS environmental variables when executing se (no CVSS)
- [CVE-2001-0178](https://cve.now/CVE-2001-0178.md): kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows (no CVSS)
- [CVE-2001-0179](https://cve.now/CVE-2001-0179.md): Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a mal (no CVSS)
- [CVE-2001-0183](https://cve.now/CVE-2001-0183.md): ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, whi (no CVSS)
- [CVE-2001-0185](https://cve.now/CVE-2001-0185.md): Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to (no CVSS)
- [CVE-2001-0187](https://cve.now/CVE-2001-0187.md): Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2001-0190](https://cve.now/CVE-2001-0190.md): Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by ex (no CVSS)
- [CVE-2001-0191](https://cve.now/CVE-2001-0191.md): gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which all (no CVSS)
- [CVE-2001-0193](https://cve.now/CVE-2001-0193.md): Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter. (no CVSS)
- [CVE-2001-0194](https://cve.now/CVE-2001-0194.md): Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line. (no CVSS)
- [CVE-2001-0195](https://cve.now/CVE-2001-0195.md): sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain (no CVSS)
- [CVE-2001-0196](https://cve.now/CVE-2001-0196.md): inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 by (no CVSS)
- [CVE-2001-0197](https://cve.now/CVE-2001-0197.md): Format string vulnerability in print\_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0218](https://cve.now/CVE-2001-0218.md): Format string vulnerability in mars\_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0219](https://cve.now/CVE-2001-0219.md): Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service. (no CVSS)
- [CVE-2001-0221](https://cve.now/CVE-2001-0221.md): Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges. (no CVSS)
- [CVE-2001-0222](https://cve.now/CVE-2001-0222.md): webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0230](https://cve.now/CVE-2001-0230.md): Buffer overflow in dc20ctrl before 0.4\_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges. (no CVSS)
- [CVE-2001-0233](https://cve.now/CVE-2001-0233.md): Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary comman (no CVSS)
- [CVE-2001-0234](https://cve.now/CVE-2001-0234.md): NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user\_username parameter (no CVSS)
- [CVE-2001-0259](https://cve.now/CVE-2001-0259.md): ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, w (no CVSS)
- [CVE-2001-0260](https://cve.now/CVE-2001-0260.md): Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a l (no CVSS)
- [CVE-2001-0266](https://cve.now/CVE-2001-0266.md): Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-2001-0267](https://cve.now/CVE-2001-0267.md): NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges. (no CVSS)
- [CVE-2001-0268](https://cve.now/CVE-2001-0268.md): The i386\_set\_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER\_LDT kernel option is enabled, does not va (no CVSS)
- [CVE-2001-0274](https://cve.now/CVE-2001-0274.md): kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. (no CVSS)
- [CVE-2001-0278](https://cve.now/CVE-2001-0278.md): Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-2001-0279](https://cve.now/CVE-2001-0279.md): Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges. (no CVSS)
- [CVE-2001-0284](https://cve.now/CVE-2001-0284.md): Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possi (no CVSS)
- [CVE-2001-0287](https://cve.now/CVE-2001-0287.md): VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltsta (no CVSS)
- [CVE-2001-0288](https://cve.now/CVE-2001-0288.md): Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attacke (no CVSS)
- [CVE-2001-0289](https://cve.now/CVE-2001-0289.md): Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain pr (no CVSS)
- [CVE-2001-0290](https://cve.now/CVE-2001-0290.md): Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. (no CVSS)
- [CVE-2001-0295](https://cve.now/CVE-2001-0295.md): Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir \* (no CVSS)
- [CVE-2001-0299](https://cve.now/CVE-2001-0299.md): Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute a (no CVSS)
- [CVE-2001-0301](https://cve.now/CVE-2001-0301.md): Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large st (no CVSS)
- [CVE-2001-0309](https://cve.now/CVE-2001-0309.md): inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attacke (no CVSS)
- [CVE-2001-0310](https://cve.now/CVE-2001-0310.md): sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle (no CVSS)
- [CVE-2001-0311](https://cve.now/CVE-2001-0311.md): Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client. (no CVSS)
- [CVE-2001-0316](https://cve.now/CVE-2001-0316.md): Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call. (no CVSS)
- [CVE-2001-0317](https://cve.now/CVE-2001-0317.md): Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running set (no CVSS)
- [CVE-2001-0318](https://cve.now/CVE-2001-0318.md): Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while usin (no CVSS)
- [CVE-2001-0319](https://cve.now/CVE-2001-0319.md): orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order\_rn opt (no CVSS)
- [CVE-2001-0326](https://cve.now/CVE-2001-0326.md): Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-05-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.