# CVEs published 2001-07-27

61 CVEs were published on July 27, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0349](https://cve.now/CVE-2001-0349.md): Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users (no CVSS)
- [CVE-2001-0350](https://cve.now/CVE-2001-0350.md): Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users (no CVSS)
- [CVE-2001-0352](https://cve.now/CVE-2001-0352.md): SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it fr (no CVSS)
- [CVE-2001-0357](https://cve.now/CVE-2001-0357.md): FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message param (no CVSS)
- [CVE-2001-0498](https://cve.now/CVE-2001-0498.md): Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service v (no CVSS)
- [CVE-2001-0499](https://cve.now/CVE-2001-0499.md): Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges vi (no CVSS)
- [CVE-2001-0515](https://cve.now/CVE-2001-0515.md): Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large off (no CVSS)
- [CVE-2001-0516](https://cve.now/CVE-2001-0516.md): Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that (no CVSS)
- [CVE-2001-0519](https://cve.now/CVE-2001-0519.md): Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which (no CVSS)
- [CVE-2001-0520](https://cve.now/CVE-2001-0520.md): Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts with (no CVSS)
- [CVE-2001-0521](https://cve.now/CVE-2001-0521.md): Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRI (no CVSS)
- [CVE-2001-0523](https://cve.now/CVE-2001-0523.md): eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML charac (no CVSS)
- [CVE-2001-0524](https://cve.now/CVE-2001-0524.md): eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to sen (no CVSS)
- [CVE-2001-0534](https://cve.now/CVE-2001-0534.md): Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of (no CVSS)
- [CVE-2001-0555](https://cve.now/CVE-2001-0555.md): ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (no CVSS)
- [CVE-2001-0556](https://cve.now/CVE-2001-0556.md): The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup file (no CVSS)
- [CVE-2001-0557](https://cve.now/CVE-2001-0557.md): T. (no CVSS)
- [CVE-2001-0561](https://cve.now/CVE-2001-0561.md): Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot do (no CVSS)
- [CVE-2001-0562](https://cve.now/CVE-2001-0562.md): a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which inc (no CVSS)
- [CVE-2001-0566](https://cve.now/CVE-2001-0566.md): Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNM (no CVSS)
- [CVE-2001-0568](https://cve.now/CVE-2001-0568.md): Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasse (no CVSS)
- [CVE-2001-0569](https://cve.now/CVE-2001-0569.md): Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) Pro (no CVSS)
- [CVE-2001-0570](https://cve.now/CVE-2001-0570.md): minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks. (no CVSS)
- [CVE-2001-0571](https://cve.now/CVE-2001-0571.md): Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 al (no CVSS)
- [CVE-2001-0572](https://cve.now/CVE-2001-0572.md): The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker (no CVSS)
- [CVE-2001-0575](https://cve.now/CVE-2001-0575.md): Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpsh (no CVSS)
- [CVE-2001-0576](https://cve.now/CVE-2001-0576.md): lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attac (no CVSS)
- [CVE-2001-0577](https://cve.now/CVE-2001-0577.md): recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first (no CVSS)
- [CVE-2001-0578](https://cve.now/CVE-2001-0578.md): Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to (no CVSS)
- [CVE-2001-0579](https://cve.now/CVE-2001-0579.md): lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument (no CVSS)
- [CVE-2001-0580](https://cve.now/CVE-2001-0580.md): Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending (no CVSS)
- [CVE-2001-0581](https://cve.now/CVE-2001-0581.md): Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387 (no CVSS)
- [CVE-2001-0582](https://cve.now/CVE-2001-0582.md): Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations (no CVSS)
- [CVE-2001-0583](https://cve.now/CVE-2001-0583.md): Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET (no CVSS)
- [CVE-2001-0584](https://cve.now/CVE-2001-0584.md): IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE c (no CVSS)
- [CVE-2001-0587](https://cve.now/CVE-2001-0587.md): deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in th (no CVSS)
- [CVE-2001-0588](https://cve.now/CVE-2001-0588.md): sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges (no CVSS)
- [CVE-2001-0592](https://cve.now/CVE-2001-0592.md): Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (\>10,000) of malf (no CVSS)
- [CVE-2001-0597](https://cve.now/CVE-2001-0597.md): Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords vi (no CVSS)
- [CVE-2001-0598](https://cve.now/CVE-2001-0598.md): Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (\> 45Kb) amounts of data to the Ghost (no CVSS)
- [CVE-2001-0599](https://cve.now/CVE-2001-0599.md): Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to creat (no CVSS)
- [CVE-2001-0600](https://cve.now/CVE-2001-0600.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, (no CVSS)
- [CVE-2001-0601](https://cve.now/CVE-2001-0601.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of U (no CVSS)
- [CVE-2001-0602](https://cve.now/CVE-2001-0602.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (\>400) URL requests for DOS devices. (no CVSS)
- [CVE-2001-0603](https://cve.now/CVE-2001-0603.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (\> 10Kb) amounts of data (no CVSS)
- [CVE-2001-0604](https://cve.now/CVE-2001-0604.md): Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (\>8Kb) containing a large number of ' (no CVSS)
- [CVE-2001-0605](https://cve.now/CVE-2001-0605.md): Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins- (no CVSS)
- [CVE-2001-0606](https://cve.now/CVE-2001-0606.md): Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of servi (no CVSS)
- [CVE-2001-0607](https://cve.now/CVE-2001-0607.md): asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges v (no CVSS)
- [CVE-2001-0608](https://cve.now/CVE-2001-0608.md): HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional pr (no CVSS)
- [CVE-2001-0609](https://cve.now/CVE-2001-0609.md): Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed id (no CVSS)
- [CVE-2001-0610](https://cve.now/CVE-2001-0610.md): kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tm (no CVSS)
- [CVE-2001-0614](https://cve.now/CVE-2001-0614.md): Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially c (no CVSS)
- [CVE-2001-0617](https://cve.now/CVE-2001-0617.md): Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attack (no CVSS)
- [CVE-2001-0618](https://cve.now/CVE-2001-0618.md): Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (W (no CVSS)
- [CVE-2001-0619](https://cve.now/CVE-2001-0619.md): The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. (no CVSS)
- [CVE-2001-0620](https://cve.now/CVE-2001-0620.md): iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read a (no CVSS)
- [CVE-2001-0623](https://cve.now/CVE-2001-0623.md): sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sendin (no CVSS)
- [CVE-2001-0624](https://cve.now/CVE-2001-0624.md): QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. (no CVSS)
- [CVE-2001-0632](https://cve.now/CVE-2001-0632.md): Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a re (no CVSS)
- [CVE-2001-0633](https://cve.now/CVE-2001-0633.md): Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web ro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.