# CVEs published 2001-05-24

91 CVEs were published on May 24, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0242](https://cve.now/CVE-2001-0242.md): Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version (no CVSS)
- [CVE-2001-0246](https://cve.now/CVE-2001-0246.md): Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site opera (no CVSS)
- [CVE-2001-0247](https://cve.now/CVE-2001-0247.md): Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se (no CVSS)
- [CVE-2001-0248](https://cve.now/CVE-2001-0248.md): Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the S (no CVSS)
- [CVE-2001-0249](https://cve.now/CVE-2001-0249.md): Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the L (no CVSS)
- [CVE-2001-0262](https://cve.now/CVE-2001-0262.md): Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL. (no CVSS)
- [CVE-2001-0263](https://cve.now/CVE-2001-0263.md): Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MD (no CVSS)
- [CVE-2001-0264](https://cve.now/CVE-2001-0264.md): Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file th (no CVSS)
- [CVE-2001-0328](https://cve.now/CVE-2001-0328.md): TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or (no CVSS)
- [CVE-2001-0329](https://cve.now/CVE-2001-0329.md): Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the (no CVSS)
- [CVE-2001-0332](https://cve.now/CVE-2001-0332.md): Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site opera (no CVSS)
- [CVE-2001-0337](https://cve.now/CVE-2001-0337.md): The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of serv (no CVSS)
- [CVE-2001-0354](https://cve.now/CVE-2001-0354.md): TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on (no CVSS)
- [CVE-2001-0355](https://cve.now/CVE-2001-0355.md): Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. (no CVSS)
- [CVE-2001-0358](https://cve.now/CVE-2001-0358.md): Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) (no CVSS)
- [CVE-2001-0359](https://cve.now/CVE-2001-0359.md): Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map comman (no CVSS)
- [CVE-2001-0360](https://cve.now/CVE-2001-0360.md): Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0367](https://cve.now/CVE-2001-0367.md): Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a (no CVSS)
- [CVE-2001-0369](https://cve.now/CVE-2001-0369.md): Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (no CVSS)
- [CVE-2001-0370](https://cve.now/CVE-2001-0370.md): fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a f (no CVSS)
- [CVE-2001-0372](https://cve.now/CVE-2001-0372.md): Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote att (no CVSS)
- [CVE-2001-0374](https://cve.now/CVE-2001-0374.md): The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (no CVSS)
- [CVE-2001-0376](https://cve.now/CVE-2001-0376.md): SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE (no CVSS)
- [CVE-2001-0380](https://cve.now/CVE-2001-0380.md): Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocume (no CVSS)
- [CVE-2001-0381](https://cve.now/CVE-2001-0381.md): The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters t (no CVSS)
- [CVE-2001-0382](https://cve.now/CVE-2001-0382.md): Computer Associates CCC\\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privilege (no CVSS)
- [CVE-2001-0384](https://cve.now/CVE-2001-0384.md): ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. (no CVSS)
- [CVE-2001-0385](https://cve.now/CVE-2001-0385.md): GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. (no CVSS)
- [CVE-2001-0389](https://cve.now/CVE-2001-0389.md): IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro wi (no CVSS)
- [CVE-2001-0390](https://cve.now/CVE-2001-0390.md): IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long st (no CVSS)
- [CVE-2001-0391](https://cve.now/CVE-2001-0391.md): Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory. (no CVSS)
- [CVE-2001-0392](https://cve.now/CVE-2001-0392.md): Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long stri (no CVSS)
- [CVE-2001-0393](https://cve.now/CVE-2001-0393.md): Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without provid (no CVSS)
- [CVE-2001-0395](https://cve.now/CVE-2001-0395.md): Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brut (no CVSS)
- [CVE-2001-0396](https://cve.now/CVE-2001-0396.md): The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2001-0397](https://cve.now/CVE-2001-0397.md): Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary (no CVSS)
- [CVE-2001-0398](https://cve.now/CVE-2001-0398.md): The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attac (no CVSS)
- [CVE-2001-0399](https://cve.now/CVE-2001-0399.md): Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifi (no CVSS)
- [CVE-2001-0400](https://cve.now/CVE-2001-0400.md): nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("\`") in the email address. (no CVSS)
- [CVE-2001-0401](https://cve.now/CVE-2001-0401.md): Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. (no CVSS)
- [CVE-2001-0403](https://cve.now/CVE-2001-0403.md): /opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI. (no CVSS)
- [CVE-2001-0404](https://cve.now/CVE-2001-0404.md): Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0406](https://cve.now/CVE-2001-0406.md): Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more co (no CVSS)
- [CVE-2001-0410](https://cve.now/CVE-2001-0410.md): Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c (no CVSS)
- [CVE-2001-0411](https://cve.now/CVE-2001-0411.md): Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant (no CVSS)
- [CVE-2001-0415](https://cve.now/CVE-2001-0415.md): REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce (no CVSS)
- [CVE-2001-0417](https://cve.now/CVE-2001-0417.md): Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files. (no CVSS)
- [CVE-2001-0418](https://cve.now/CVE-2001-0418.md): content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting S (no CVSS)
- [CVE-2001-0419](https://cve.now/CVE-2001-0419.md): Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0. (no CVSS)
- [CVE-2001-0420](https://cve.now/CVE-2001-0420.md): Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0421](https://cve.now/CVE-2001-0421.md): FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readab (no CVSS)
- [CVE-2001-0424](https://cve.now/CVE-2001-0424.md): BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands wit (no CVSS)
- [CVE-2001-0425](https://cve.now/CVE-2001-0425.md): AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which (no CVSS)
- [CVE-2001-0426](https://cve.now/CVE-2001-0426.md): Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environ (no CVSS)
- [CVE-2001-0431](https://cve.now/CVE-2001-0431.md): Vulnerability in iPlanet Web Server Enterprise Edition 4.x. (no CVSS)
- [CVE-2001-0432](https://cve.now/CVE-2001-0432.md): Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attacker (no CVSS)
- [CVE-2001-0433](https://cve.now/CVE-2001-0433.md): Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (no CVSS)
- [CVE-2001-0435](https://cve.now/CVE-2001-0435.md): The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while (no CVSS)
- [CVE-2001-0436](https://cve.now/CVE-2001-0436.md): dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a (no CVSS)
- [CVE-2001-0437](https://cve.now/CVE-2001-0437.md): upload\_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to u (no CVSS)
- [CVE-2001-0438](https://cve.now/CVE-2001-0438.md): Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. (no CVSS)
- [CVE-2001-0441](https://cve.now/CVE-2001-0441.md): Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2001-0443](https://cve.now/CVE-2001-0443.md): Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary (no CVSS)
- [CVE-2001-0446](https://cve.now/CVE-2001-0446.md): IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appendi (no CVSS)
- [CVE-2001-0447](https://cve.now/CVE-2001-0447.md): Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, (no CVSS)
- [CVE-2001-0448](https://cve.now/CVE-2001-0448.md): Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux di (no CVSS)
- [CVE-2001-0450](https://cve.now/CVE-2001-0450.md): Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list (no CVSS)
- [CVE-2001-0451](https://cve.now/CVE-2001-0451.md): INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie\_admin\_authenticated c (no CVSS)
- [CVE-2001-0452](https://cve.now/CVE-2001-0452.md): BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD \*" command followed by (no CVSS)
- [CVE-2001-0453](https://cve.now/CVE-2001-0453.md): Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0454](https://cve.now/CVE-2001-0454.md): Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (no CVSS)
- [CVE-2001-0458](https://cve.now/CVE-2001-0458.md): Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0459](https://cve.now/CVE-2001-0459.md): Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, (no CVSS)
- [CVE-2001-0460](https://cve.now/CVE-2001-0460.md): Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaust (no CVSS)
- [CVE-2001-0464](https://cve.now/CVE-2001-0464.md): Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter. (no CVSS)
- [CVE-2001-0466](https://cve.now/CVE-2001-0466.md): Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0468](https://cve.now/CVE-2001-0468.md): Buffer overflow in FTPFS allows local users to gain root privileges via a long user name. (no CVSS)
- [CVE-2001-0470](https://cve.now/CVE-2001-0470.md): Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program na (no CVSS)
- [CVE-2001-0471](https://cve.now/CVE-2001-0471.md): SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to co (no CVSS)
- [CVE-2001-0472](https://cve.now/CVE-2001-0472.md): Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (cras (no CVSS)
- [CVE-2001-0476](https://cve.now/CVE-2001-0476.md): Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2001-0477](https://cve.now/CVE-2001-0477.md): Vulnerability in WebCalendar 0.9.26 allows remote command execution. (no CVSS)
- [CVE-2001-0478](https://cve.now/CVE-2001-0478.md): Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (no CVSS)
- [CVE-2001-0479](https://cve.now/CVE-2001-0479.md): Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (no CVSS)
- [CVE-2001-0480](https://cve.now/CVE-2001-0480.md): Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (no CVSS)
- [CVE-2001-0483](https://cve.now/CVE-2001-0483.md): Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources whe (no CVSS)
- [CVE-2001-0484](https://cve.now/CVE-2001-0484.md): Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as \_ncl\_subjects.shtml and \_ncl\_items.shtml, (no CVSS)
- [CVE-2001-0490](https://cve.now/CVE-2001-0490.md): Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file. (no CVSS)
- [CVE-2001-0491](https://cve.now/CVE-2001-0491.md): Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot do (no CVSS)
- [CVE-2001-0492](https://cve.now/CVE-2001-0492.md): Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (no CVSS)
- [CVE-2001-0496](https://cve.now/CVE-2001-0496.md): kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileg (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.