CVEs published September 18, 2001
94 CVEs were published on September 18, 2001: 0 critical, 0 high.
- Published
- 94
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 94
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 94
- CVE-1999-0756ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.
- CVE-2000-0243AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin.
- CVE-2000-0568Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to mo
- CVE-2000-0569Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface.
- CVE-2000-0576Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL.
- CVE-2000-0620libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite l
- CVE-2000-0799inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary
- CVE-2000-0877mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file par
- CVE-2000-0897Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dir
- CVE-2000-0945The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication w
- CVE-2000-1047Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute
- CVE-2001-0004IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested
- CVE-2001-0020Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files
- CVE-2001-0077The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such
- CVE-2001-0078in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.
- CVE-2001-0095catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
- CVE-2001-0108PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unres
- CVE-2001-0121ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string
- CVE-2001-0136Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman
- CVE-2001-0155Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name th
- CVE-2001-0164Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary comm
- CVE-2001-0174Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary c
- CVE-2001-0175The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting
- CVE-2001-0176The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
- CVE-2001-0182FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packet
- CVE-2001-0189Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a ..
- CVE-2001-0203Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a f
- CVE-2001-0207Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a
- CVE-2001-0215ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating th
- CVE-2001-0235Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while
- CVE-2001-0237Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerbero
- CVE-2001-0238Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restri
- CVE-2001-0239Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web
- CVE-2001-0240Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) docum
- CVE-2001-0241Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print reques
- CVE-2001-0243Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Inte
- CVE-2001-0244Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
- CVE-2001-0245Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include file
- CVE-2001-0330Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for
- CVE-2001-0331Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary c
- CVE-2001-0333Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding ..
- CVE-2001-0334FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string
- CVE-2001-0335FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a s
- CVE-2001-0336The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed
- CVE-2001-0338Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled
- CVE-2001-0339Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuall
- CVE-2001-0340An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to exec
- CVE-2001-0341Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbit
- CVE-2001-0344An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a c
- CVE-2001-0345Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creat
- CVE-2001-0346Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions an
- CVE-2001-0347Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user acc
- CVE-2001-0348Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspa
- CVE-2001-0351Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session a
- CVE-2001-0353Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via
- CVE-2001-0361Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain c
- CVE-2001-0368Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a serie
- CVE-2001-0377Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space
- CVE-2001-0378readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover
- CVE-2001-0379Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.
- CVE-2001-0383banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which doe
- CVE-2001-0387Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
- CVE-2001-0388time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
- CVE-2001-0402IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access res
- CVE-2001-0405ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT c
- CVE-2001-0408vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when anoth
- CVE-2001-0409vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi
- CVE-2001-0412Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode
- CVE-2001-0413BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau
- CVE-2001-0414Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib
- CVE-2001-0427Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login request
- CVE-2001-0428Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP
- CVE-2001-0429Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which ca
- CVE-2001-0430Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
- CVE-2001-0434The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote a
- CVE-2001-0439licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
- CVE-2001-0440Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitra
- CVE-2001-0455Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to
- CVE-2001-0456postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enable
- CVE-2001-0457man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).
- CVE-2001-0462Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a ..
- CVE-2001-0465TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow
- CVE-2001-0467Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \...
- CVE-2001-0469rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via
- CVE-2001-0473Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.
- CVE-2001-0474Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmem
- CVE-2001-0475index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote a
- CVE-2001-0481Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
- CVE-2001-0482Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or e
- CVE-2001-0486Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.
- CVE-2001-0488pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.
- CVE-2001-0489Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
- CVE-2001-0494Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long
- CVE-2001-0495Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a ..