# CVEs published 2001-11-22

33 CVEs were published on November 22, 2001: 0 critical, 1 high. Days are UTC.

- [CVE-2001-0671](https://cve.now/CVE-2001-0671.md): Buffer overflows in (1) send\_status, (2) kill\_print, and (3) chk\_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privile (no CVSS)
- [CVE-2001-0721](https://cve.now/CVE-2001-0721.md): Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or c (no CVSS)
- [CVE-2001-0799](https://cve.now/CVE-2001-0799.md): Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument. (no CVSS)
- [CVE-2001-0800](https://cve.now/CVE-2001-0800.md): lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. (no CVSS)
- [CVE-2001-0807](https://cve.now/CVE-2001-0807.md): Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client' (no CVSS)
- [CVE-2001-0808](https://cve.now/CVE-2001-0808.md): gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help\_file (no CVSS)
- [CVE-2001-0809](https://cve.now/CVE-2001-0809.md): Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users (no CVSS)
- [CVE-2001-0817](https://cve.now/CVE-2001-0817.md): Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and ga (no CVSS)
- [CVE-2001-0818](https://cve.now/CVE-2001-0818.md): A buffer overflow the '\\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the (no CVSS)
- [CVE-2001-0820](https://cve.now/CVE-2001-0820.md): Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log f (no CVSS)
- [CVE-2001-0821](https://cve.now/CVE-2001-0821.md): The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read s (no CVSS)
- [CVE-2001-0824](https://cve.now/CVE-2001-0824.md): Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascri (no CVSS)
- [CVE-2001-0826](https://cve.now/CVE-2001-0826.md): Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS (no CVSS)
- [CVE-2001-0827](https://cve.now/CVE-2001-0827.md): Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests. (CVSS 7.5)
- [CVE-2001-0829](https://cve.now/CVE-2001-0829.md): A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, w (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2001-0831](https://cve.now/CVE-2001-0831.md): Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET\_LABEL, or SQL\*Predicate is being use (no CVSS)
- [CVE-2001-0832](https://cve.now/CVE-2001-0832.md): Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorr (no CVSS)
- [CVE-2001-0835](https://cve.now/CVE-2001-0835.md): Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags (no CVSS)
- [CVE-2001-0838](https://cve.now/CVE-2001-0838.md): Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifier (no CVSS)
- [CVE-2001-0839](https://cve.now/CVE-2001-0839.md): ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER\_ACCOUNT, which allows remote attackers to (no CVSS)
- [CVE-2001-0840](https://cve.now/CVE-2001-0840.md): Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI. (no CVSS)
- [CVE-2001-0841](https://cve.now/CVE-2001-0841.md): Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privilege (no CVSS)
- [CVE-2001-0842](https://cve.now/CVE-2001-0842.md): Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and (no CVSS)
- [CVE-2001-0844](https://cve.now/CVE-2001-0844.md): Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email (no CVSS)
- [CVE-2001-0845](https://cve.now/CVE-2001-0845.md): Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain acc (no CVSS)
- [CVE-2001-0847](https://cve.now/CVE-2001-0847.md): Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL (no CVSS)
- [CVE-2001-0848](https://cve.now/CVE-2001-0848.md): join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable. (no CVSS)
- [CVE-2001-0849](https://cve.now/CVE-2001-0849.md): viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloade (no CVSS)
- [CVE-2001-0853](https://cve.now/CVE-2001-0853.md): Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0854](https://cve.now/CVE-2001-0854.md): PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which (no CVSS)
- [CVE-2001-0855](https://cve.now/CVE-2001-0855.md): Buffer overflow in db\_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable. (no CVSS)
- [CVE-2001-0856](https://cve.now/CVE-2001-0856.md): Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine\_Key\_Parts permissions, (no CVSS)
- [CVE-2001-0858](https://cve.now/CVE-2001-0858.md): Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2001-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.