# CVEs published 2001-10-12

45 CVEs were published on October 12, 2001: 0 critical, 0 high. Days are UTC.

- [CVE-2001-0505](https://cve.now/CVE-2001-0505.md): Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large (no CVSS)
- [CVE-2001-0535](https://cve.now/CVE-2001-0535.md): Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, wh (no CVSS)
- [CVE-2001-0669](https://cve.now/CVE-2001-0669.md): Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection (no CVSS)
- [CVE-2001-0712](https://cve.now/CVE-2001-0712.md): The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows r (no CVSS)
- [CVE-2001-0713](https://cve.now/CVE-2001-0713.md): Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local u (no CVSS)
- [CVE-2001-0714](https://cve.now/CVE-2001-0714.md): Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) sett (no CVSS)
- [CVE-2001-0715](https://cve.now/CVE-2001-0715.md): Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about th (no CVSS)
- [CVE-2001-0729](https://cve.now/CVE-2001-0729.md): Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large (no CVSS)
- [CVE-2001-0734](https://cve.now/CVE-2001-0734.md): Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are (no CVSS)
- [CVE-2001-0735](https://cve.now/CVE-2001-0735.md): Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW\_LINE\_PARSING option enabled allows local users to execute arbitrary code via a (no CVSS)
- [CVE-2001-0736](https://cve.now/CVE-2001-0736.md): Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary fil (no CVSS)
- [CVE-2001-0737](https://cve.now/CVE-2001-0737.md): A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle (no CVSS)
- [CVE-2001-0742](https://cve.now/CVE-2001-0742.md): Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command. (no CVSS)
- [CVE-2001-0743](https://cve.now/CVE-2001-0743.md): Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' charact (no CVSS)
- [CVE-2001-0744](https://cve.now/CVE-2001-0744.md): Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file. (no CVSS)
- [CVE-2001-0746](https://cve.now/CVE-2001-0746.md): Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2001-0747](https://cve.now/CVE-2001-0747.md): Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of (no CVSS)
- [CVE-2001-0753](https://cve.now/CVE-2001-0753.md): Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which coul (no CVSS)
- [CVE-2001-0755](https://cve.now/CVE-2001-0755.md): Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary co (no CVSS)
- [CVE-2001-0756](https://cve.now/CVE-2001-0756.md): CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the templat (no CVSS)
- [CVE-2001-0758](https://cve.now/CVE-2001-0758.md): Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command. (no CVSS)
- [CVE-2001-0759](https://cve.now/CVE-2001-0759.md): Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a (no CVSS)
- [CVE-2001-0761](https://cve.now/CVE-2001-0761.md): Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value t (no CVSS)
- [CVE-2001-0762](https://cve.now/CVE-2001-0762.md): Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument. (no CVSS)
- [CVE-2001-0766](https://cve.now/CVE-2001-0766.md): Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some (no CVSS)
- [CVE-2001-0767](https://cve.now/CVE-2001-0767.md): Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. (no CVSS)
- [CVE-2001-0768](https://cve.now/CVE-2001-0768.md): GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other F (no CVSS)
- [CVE-2001-0771](https://cve.now/CVE-2001-0771.md): Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field. (no CVSS)
- [CVE-2001-0772](https://cve.now/CVE-2001-0772.md): Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers (no CVSS)
- [CVE-2001-0775](https://cve.now/CVE-2001-0775.md): Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imag (no CVSS)
- [CVE-2001-0776](https://cve.now/CVE-2001-0776.md): Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 serv (no CVSS)
- [CVE-2001-0777](https://cve.now/CVE-2001-0777.md): Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts. (no CVSS)
- [CVE-2001-0778](https://cve.now/CVE-2001-0778.md): OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20). (no CVSS)
- [CVE-2001-0780](https://cve.now/CVE-2001-0780.md): Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via (no CVSS)
- [CVE-2001-0781](https://cve.now/CVE-2001-0781.md): Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LI (no CVSS)
- [CVE-2001-0782](https://cve.now/CVE-2001-0782.md): KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file. (no CVSS)
- [CVE-2001-0783](https://cve.now/CVE-2001-0783.md): Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command. (no CVSS)
- [CVE-2001-0785](https://cve.now/CVE-2001-0785.md): Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote at (no CVSS)
- [CVE-2001-0786](https://cve.now/CVE-2001-0786.md): Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.Dat file. (no CVSS)
- [CVE-2001-0788](https://cve.now/CVE-2001-0788.md): Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server dir (no CVSS)
- [CVE-2001-0789](https://cve.now/CVE-2001-0789.md): Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or pos (no CVSS)
- [CVE-2001-0790](https://cve.now/CVE-2001-0790.md): Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the ser (no CVSS)
- [CVE-2001-0791](https://cve.now/CVE-2001-0791.md): Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI program (no CVSS)
- [CVE-2001-0794](https://cve.now/CVE-2001-0794.md): Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command. (no CVSS)
- [CVE-2001-0795](https://cve.now/CVE-2001-0795.md): Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-10-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.