CVEs published May 24, 2001
91 CVEs were published on May 24, 2001: 0 critical, 0 high.
- Published
- 91
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 91
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 91
- CVE-2001-0242Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version
- CVE-2001-0246Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site opera
- CVE-2001-0247Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se
- CVE-2001-0248Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the S
- CVE-2001-0249Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the L
- CVE-2001-0262Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
- CVE-2001-0263Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MD
- CVE-2001-0264Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file th
- CVE-2001-0328TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or
- CVE-2001-0329Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the
- CVE-2001-0332Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site opera
- CVE-2001-0337The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of serv
- CVE-2001-0354TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on
- CVE-2001-0355Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies.
- CVE-2001-0358Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2)
- CVE-2001-0359Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map comman
- CVE-2001-0360Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a ..
- CVE-2001-0367Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a
- CVE-2001-0369Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument
- CVE-2001-0370fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a f
- CVE-2001-0372Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote att
- CVE-2001-0374The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents,
- CVE-2001-0376SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE
- CVE-2001-0380Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocume
- CVE-2001-0381The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters t
- CVE-2001-0382Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privilege
- CVE-2001-0384ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
- CVE-2001-0385GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
- CVE-2001-0389IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro wi
- CVE-2001-0390IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long st
- CVE-2001-0391Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
- CVE-2001-0392Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long stri
- CVE-2001-0393Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without provid
- CVE-2001-0395Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brut
- CVE-2001-0396The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive informa
- CVE-2001-0397Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary
- CVE-2001-0398The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attac
- CVE-2001-0399Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifi
- CVE-2001-0400nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.
- CVE-2001-0401Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
- CVE-2001-0403/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
- CVE-2001-0404Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a ..
- CVE-2001-0406Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more co
- CVE-2001-0410Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c
- CVE-2001-0411Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant
- CVE-2001-0415REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce
- CVE-2001-0417Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
- CVE-2001-0418content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting S
- CVE-2001-0419Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.
- CVE-2001-0420Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a ..
- CVE-2001-0421FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readab
- CVE-2001-0424BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands wit
- CVE-2001-0425AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which
- CVE-2001-0426Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environ
- CVE-2001-0431Vulnerability in iPlanet Web Server Enterprise Edition 4.x.
- CVE-2001-0432Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attacker
- CVE-2001-0433Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via
- CVE-2001-0435The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while
- CVE-2001-0436dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a
- CVE-2001-0437upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to u
- CVE-2001-0438Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu.
- CVE-2001-0441Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary
- CVE-2001-0443Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary
- CVE-2001-0446IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appendi
- CVE-2001-0447Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands,
- CVE-2001-0448Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux di
- CVE-2001-0450Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list
- CVE-2001-0451INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_admin_authenticated c
- CVE-2001-0452BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by
- CVE-2001-0453Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a ..
- CVE-2001-0454Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ...
- CVE-2001-0458Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
- CVE-2001-0459Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option,
- CVE-2001-0460Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaust
- CVE-2001-0464Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.
- CVE-2001-0466Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a ..
- CVE-2001-0468Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
- CVE-2001-0470Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program na
- CVE-2001-0471SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to co
- CVE-2001-0472Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (cras
- CVE-2001-0476Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands vi
- CVE-2001-0477Vulnerability in WebCalendar 0.9.26 allows remote command execution.
- CVE-2001-0478Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a ..
- CVE-2001-0479Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a ..
- CVE-2001-0480Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ...
- CVE-2001-0483Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources whe
- CVE-2001-0484Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml,
- CVE-2001-0490Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
- CVE-2001-0491Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot do
- CVE-2001-0492Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing
- CVE-2001-0496kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileg