# CVEs published 2001-09-18

94 CVEs were published on September 18, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-1999-0756](https://cve.now/CVE-1999-0756.md): ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. (no CVSS)
- [CVE-2000-0243](https://cve.now/CVE-2000-0243.md): AnalogX SimpleServer:WWW HTTP server 1.03 allows remote attackers to cause a denial of service via a short GET request to cgi-bin. (no CVSS)
- [CVE-2000-0568](https://cve.now/CVE-2000-0568.md): Sybergen Secure Desktop 2.1 does not properly protect against false router advertisements (ICMP type 9), which allows remote attackers to mo (no CVSS)
- [CVE-2000-0569](https://cve.now/CVE-2000-0569.md): Sybergen Sygate allows remote attackers to cause a denial of service by sending a malformed DNS UDP packet to its internal interface. (no CVSS)
- [CVE-2000-0576](https://cve.now/CVE-2000-0576.md): Oracle Web Listener for AIX versions 4.0.7.0.0 and 4.0.8.1.0 allows remote attackers to cause a denial of service via a malformed URL. (no CVSS)
- [CVE-2000-0620](https://cve.now/CVE-2000-0620.md): libX11 X library allows remote attackers to cause a denial of service via a resource mask of 0, which causes libX11 to go into an infinite l (no CVSS)
- [CVE-2000-0799](https://cve.now/CVE-2000-0799.md): inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a symlink attack on the .ilmpAAA temporary (no CVSS)
- [CVE-2000-0877](https://cve.now/CVE-2000-0877.md): mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach\_file par (no CVSS)
- [CVE-2000-0897](https://cve.now/CVE-2000-0897.md): Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL that references a dir (no CVSS)
- [CVE-2000-0945](https://cve.now/CVE-2000-0945.md): The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication w (no CVSS)
- [CVE-2000-1047](https://cve.now/CVE-2000-1047.md): Buffer overflow in SMTP service of Lotus Domino 5.0.4 and earlier allows remote attackers to cause a denial of service and possibly execute (no CVSS)
- [CVE-2001-0004](https://cve.now/CVE-2001-0004.md): IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested (no CVSS)
- [CVE-2001-0020](https://cve.now/CVE-2001-0020.md): Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files (no CVSS)
- [CVE-2001-0077](https://cve.now/CVE-2001-0077.md): The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such (no CVSS)
- [CVE-2001-0078](https://cve.now/CVE-2001-0078.md): in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS. (no CVSS)
- [CVE-2001-0095](https://cve.now/CVE-2001-0095.md): catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman\_PID temporary file. (no CVSS)
- [CVE-2001-0108](https://cve.now/CVE-2001-0108.md): PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unres (no CVSS)
- [CVE-2001-0121](https://cve.now/CVE-2001-0121.md): ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string (no CVSS)
- [CVE-2001-0136](https://cve.now/CVE-2001-0136.md): Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman (no CVSS)
- [CVE-2001-0155](https://cve.now/CVE-2001-0155.md): Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name th (no CVSS)
- [CVE-2001-0164](https://cve.now/CVE-2001-0164.md): Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary comm (no CVSS)
- [CVE-2001-0174](https://cve.now/CVE-2001-0174.md): Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary c (no CVSS)
- [CVE-2001-0175](https://cve.now/CVE-2001-0175.md): The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting (no CVSS)
- [CVE-2001-0176](https://cve.now/CVE-2001-0176.md): The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges. (no CVSS)
- [CVE-2001-0182](https://cve.now/CVE-2001-0182.md): FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packet (no CVSS)
- [CVE-2001-0189](https://cve.now/CVE-2001-0189.md): Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (no CVSS)
- [CVE-2001-0203](https://cve.now/CVE-2001-0203.md): Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a f (no CVSS)
- [CVE-2001-0207](https://cve.now/CVE-2001-0207.md): Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a (no CVSS)
- [CVE-2001-0215](https://cve.now/CVE-2001-0215.md): ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating th (no CVSS)
- [CVE-2001-0235](https://cve.now/CVE-2001-0235.md): Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while (no CVSS)
- [CVE-2001-0237](https://cve.now/CVE-2001-0237.md): Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerbero (no CVSS)
- [CVE-2001-0238](https://cve.now/CVE-2001-0238.md): Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restri (no CVSS)
- [CVE-2001-0239](https://cve.now/CVE-2001-0239.md): Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web (no CVSS)
- [CVE-2001-0240](https://cve.now/CVE-2001-0240.md): Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) docum (no CVSS)
- [CVE-2001-0241](https://cve.now/CVE-2001-0241.md): Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print reques (no CVSS)
- [CVE-2001-0243](https://cve.now/CVE-2001-0243.md): Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Inte (no CVSS)
- [CVE-2001-0244](https://cve.now/CVE-2001-0244.md): Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter. (no CVSS)
- [CVE-2001-0245](https://cve.now/CVE-2001-0245.md): Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include file (no CVSS)
- [CVE-2001-0330](https://cve.now/CVE-2001-0330.md): Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for (no CVSS)
- [CVE-2001-0331](https://cve.now/CVE-2001-0331.md): Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2001-0333](https://cve.now/CVE-2001-0333.md): Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (no CVSS)
- [CVE-2001-0334](https://cve.now/CVE-2001-0334.md): FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string (no CVSS)
- [CVE-2001-0335](https://cve.now/CVE-2001-0335.md): FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a s (no CVSS)
- [CVE-2001-0336](https://cve.now/CVE-2001-0336.md): The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed (no CVSS)
- [CVE-2001-0338](https://cve.now/CVE-2001-0338.md): Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled (no CVSS)
- [CVE-2001-0339](https://cve.now/CVE-2001-0339.md): Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actuall (no CVSS)
- [CVE-2001-0340](https://cve.now/CVE-2001-0340.md): An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to exec (no CVSS)
- [CVE-2001-0341](https://cve.now/CVE-2001-0341.md): Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbit (no CVSS)
- [CVE-2001-0344](https://cve.now/CVE-2001-0344.md): An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a c (no CVSS)
- [CVE-2001-0345](https://cve.now/CVE-2001-0345.md): Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creat (no CVSS)
- [CVE-2001-0346](https://cve.now/CVE-2001-0346.md): Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions an (no CVSS)
- [CVE-2001-0347](https://cve.now/CVE-2001-0347.md): Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user acc (no CVSS)
- [CVE-2001-0348](https://cve.now/CVE-2001-0348.md): Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspa (no CVSS)
- [CVE-2001-0351](https://cve.now/CVE-2001-0351.md): Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session a (no CVSS)
- [CVE-2001-0353](https://cve.now/CVE-2001-0353.md): Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via (no CVSS)
- [CVE-2001-0361](https://cve.now/CVE-2001-0361.md): Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain c (no CVSS)
- [CVE-2001-0368](https://cve.now/CVE-2001-0368.md): Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a serie (no CVSS)
- [CVE-2001-0377](https://cve.now/CVE-2001-0377.md): Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space (no CVSS)
- [CVE-2001-0378](https://cve.now/CVE-2001-0378.md): readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover (no CVSS)
- [CVE-2001-0379](https://cve.now/CVE-2001-0379.md): Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights. (no CVSS)
- [CVE-2001-0383](https://cve.now/CVE-2001-0383.md): banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which doe (no CVSS)
- [CVE-2001-0387](https://cve.now/CVE-2001-0387.md): Format string vulnerability in hfaxd in HylaFAX before 4.1.b2\_2 allows local users to gain privileges via the -q command line argument. (no CVSS)
- [CVE-2001-0388](https://cve.now/CVE-2001-0388.md): time server daemon timed allows remote attackers to cause a denial of service via malformed packets. (no CVSS)
- [CVE-2001-0402](https://cve.now/CVE-2001-0402.md): IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access res (no CVSS)
- [CVE-2001-0405](https://cve.now/CVE-2001-0405.md): ip\_conntrack\_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT c (no CVSS)
- [CVE-2001-0408](https://cve.now/CVE-2001-0408.md): vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when anoth (no CVSS)
- [CVE-2001-0409](https://cve.now/CVE-2001-0409.md): vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi (no CVSS)
- [CVE-2001-0412](https://cve.now/CVE-2001-0412.md): Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode (no CVSS)
- [CVE-2001-0413](https://cve.now/CVE-2001-0413.md): BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau (no CVSS)
- [CVE-2001-0414](https://cve.now/CVE-2001-0414.md): Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib (no CVSS)
- [CVE-2001-0427](https://cve.now/CVE-2001-0427.md): Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login request (no CVSS)
- [CVE-2001-0428](https://cve.now/CVE-2001-0428.md): Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP (no CVSS)
- [CVE-2001-0429](https://cve.now/CVE-2001-0429.md): Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which ca (no CVSS)
- [CVE-2001-0430](https://cve.now/CVE-2001-0430.md): Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files. (no CVSS)
- [CVE-2001-0434](https://cve.now/CVE-2001-0434.md): The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote a (no CVSS)
- [CVE-2001-0439](https://cve.now/CVE-2001-0439.md): licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. (no CVSS)
- [CVE-2001-0440](https://cve.now/CVE-2001-0440.md): Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitra (no CVSS)
- [CVE-2001-0455](https://cve.now/CVE-2001-0455.md): Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to (no CVSS)
- [CVE-2001-0456](https://cve.now/CVE-2001-0456.md): postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enable (no CVSS)
- [CVE-2001-0457](https://cve.now/CVE-2001-0457.md): man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion). (no CVSS)
- [CVE-2001-0462](https://cve.now/CVE-2001-0462.md): Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0465](https://cve.now/CVE-2001-0465.md): TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow (no CVSS)
- [CVE-2001-0467](https://cve.now/CVE-2001-0467.md): Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a \\... (no CVSS)
- [CVE-2001-0469](https://cve.now/CVE-2001-0469.md): rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via (no CVSS)
- [CVE-2001-0473](https://cve.now/CVE-2001-0473.md): Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. (no CVSS)
- [CVE-2001-0474](https://cve.now/CVE-2001-0474.md): Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmem (no CVSS)
- [CVE-2001-0475](https://cve.now/CVE-2001-0475.md): index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote a (no CVSS)
- [CVE-2001-0481](https://cve.now/CVE-2001-0481.md): Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling. (no CVSS)
- [CVE-2001-0482](https://cve.now/CVE-2001-0482.md): Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or e (no CVSS)
- [CVE-2001-0486](https://cve.now/CVE-2001-0486.md): Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. (no CVSS)
- [CVE-2001-0488](https://cve.now/CVE-2001-0488.md): pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. (no CVSS)
- [CVE-2001-0489](https://cve.now/CVE-2001-0489.md): Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0494](https://cve.now/CVE-2001-0494.md): Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2001-0495](https://cve.now/CVE-2001-0495.md): Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.