# CVEs published 2002-03-09

428 CVEs were published on March 9, 2002: 0 critical, 1 high. Days are UTC.

- [CVE-1999-0380](https://cve.now/CVE-1999-0380.md): SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by (no CVSS)
- [CVE-1999-0801](https://cve.now/CVE-1999-0801.md): BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. (no CVSS)
- [CVE-1999-0815](https://cve.now/CVE-1999-0815.md): Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service (memory exhaustion) via a larg (no CVSS)
- [CVE-1999-0921](https://cve.now/CVE-1999-0921.md): BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. (no CVSS)
- [CVE-1999-0930](https://cve.now/CVE-1999-0930.md): wwwboard allows a remote attacker to delete message board articles via a malformed argument. (no CVSS)
- [CVE-1999-0968](https://cve.now/CVE-1999-0968.md): Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges. (no CVSS)
- [CVE-1999-1014](https://cve.now/CVE-1999-1014.md): Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. (no CVSS)
- [CVE-1999-1019](https://cve.now/CVE-1999-1019.md): SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to (no CVSS)
- [CVE-1999-1021](https://cve.now/CVE-1999-1021.md): NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 (no CVSS)
- [CVE-1999-1027](https://cve.now/CVE-1999-1027.md): Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Tr (no CVSS)
- [CVE-1999-1028](https://cve.now/CVE-1999-1028.md): Symantec pcAnywhere 8.0 allows remote attackers to cause a denial of service (CPU utilization) via a large amount of data to port 5631. (no CVSS)
- [CVE-1999-1032](https://cve.now/CVE-1999-1032.md): Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows attackers to gain root privileges. (no CVSS)
- [CVE-1999-1034](https://cve.now/CVE-1999-1034.md): Vulnerability in login in AT&T System V Release 4 allows local users to gain privileges. (no CVSS)
- [CVE-1999-1035](https://cve.now/CVE-1999-1035.md): IIS 3.0 and 4.0 on x86 and Alpha allows remote attackers to cause a denial of service (hang) via a malformed GET request, aka the IIS "GET" (no CVSS)
- [CVE-1999-1037](https://cve.now/CVE-1999-1037.md): rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file. (no CVSS)
- [CVE-1999-1044](https://cve.now/CVE-1999-1044.md): Vulnerability in Advanced File System Utility (advfs) in Digital UNIX 4.0 through 4.0d allows local users to gain privileges. (no CVSS)
- [CVE-1999-1045](https://cve.now/CVE-1999-1045.md): pnserver in RealServer 5.0 and earlier allows remote attackers to cause a denial of service by sending a short, malformed request. (no CVSS)
- [CVE-1999-1047](https://cve.now/CVE-1999-1047.md): When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access rest (no CVSS)
- [CVE-1999-1048](https://cve.now/CVE-1999-1048.md): Buffer overflow in bash 2.0.0, 1.4.17, and other versions allows local attackers to gain privileges by creating an extremely large directory (no CVSS)
- [CVE-1999-1055](https://cve.now/CVE-1999-1055.md): Microsoft Excel 97 does not warn the user before executing worksheet functions, which could allow attackers to execute arbitrary commands by (no CVSS)
- [CVE-1999-1057](https://cve.now/CVE-1999-1057.md): VMS 4.0 through 5.3 allows local users to gain privileges via the ANALYZE/PROCESS\_DUMP dcl command. (no CVSS)
- [CVE-1999-1059](https://cve.now/CVE-1999-1059.md): Vulnerability in rexec daemon (rexecd) in AT&T TCP/IP 4.0 for various SVR4 systems allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-1999-1074](https://cve.now/CVE-1999-1074.md): Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attacker (no CVSS)
- [CVE-1999-1085](https://cve.now/CVE-1999-1085.md): SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote at (no CVSS)
- [CVE-1999-1087](https://cve.now/CVE-1999-1087.md): Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to (no CVSS)
- [CVE-1999-1090](https://cve.now/CVE-1999-1090.md): The default configuration of NCSA Telnet package for Macintosh and PC enables FTP, even though it does not include an "ftp=yes" line, which (no CVSS)
- [CVE-1999-1093](https://cve.now/CVE-1999-1093.md): Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote atta (no CVSS)
- [CVE-1999-1094](https://cve.now/CVE-1999-1094.md): Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" pr (no CVSS)
- [CVE-1999-1098](https://cve.now/CVE-1999-1098.md): Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing (no CVSS)
- [CVE-1999-1099](https://cve.now/CVE-1999-1099.md): Kerberos 4 allows remote attackers to obtain sensitive information via a malformed UDP packet that generates an error string that inadverten (no CVSS)
- [CVE-1999-1100](https://cve.now/CVE-1999-1100.md): Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective k (no CVSS)
- [CVE-1999-1102](https://cve.now/CVE-1999-1102.md): lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via (no CVSS)
- [CVE-1999-1103](https://cve.now/CVE-1999-1103.md): dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter. (no CVSS)
- [CVE-1999-1104](https://cve.now/CVE-1999-1104.md): Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain pr (no CVSS)
- [CVE-1999-1105](https://cve.now/CVE-1999-1105.md): Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in (no CVSS)
- [CVE-1999-1109](https://cve.now/CVE-1999-1109.md): Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the (no CVSS)
- [CVE-1999-1111](https://cve.now/CVE-1999-1111.md): Vulnerability in StackGuard before 1.21 allows remote attackers to bypass the Random and Terminator Canary security mechanisms by using a no (no CVSS)
- [CVE-1999-1114](https://cve.now/CVE-1999-1114.md): Buffer overflow in Korn Shell (ksh) suid\_exec program on IRIX 6.x and earlier, and possibly other operating systems, allows local users to g (no CVSS)
- [CVE-1999-1115](https://cve.now/CVE-1999-1115.md): Vulnerability in the /etc/suid\_exec program in HP Apollo Domain/OS sr10.2 and sr10.3 beta, related to the Korn Shell (ksh). (no CVSS)
- [CVE-1999-1116](https://cve.now/CVE-1999-1116.md): Vulnerability in runpriv in Indigo Magic System Administration subsystem of SGI IRIX 6.3 and 6.4 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1117](https://cve.now/CVE-1999-1117.md): lquerypv in AIX 4.1 and 4.2 allows local users to read arbitrary files by specifying the file in the -h command line parameter. (no CVSS)
- [CVE-1999-1118](https://cve.now/CVE-1999-1118.md): ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters. (no CVSS)
- [CVE-1999-1119](https://cve.now/CVE-1999-1119.md): FTP installation script anon.ftp in AIX insecurely configures anonymous FTP, which allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-1999-1120](https://cve.now/CVE-1999-1120.md): netprint in SGI IRIX 6.4 and earlier trusts the PATH environmental variable for finding and executing the disable program, which allows loca (no CVSS)
- [CVE-1999-1121](https://cve.now/CVE-1999-1121.md): The default configuration for UUCP in AIX before 3.2 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1122](https://cve.now/CVE-1999-1122.md): Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-1999-1127](https://cve.now/CVE-1999-1127.md): Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (r (no CVSS)
- [CVE-1999-1131](https://cve.now/CVE-1999-1131.md): Buffer overflow in OSF Distributed Computing Environment (DCE) security demon (secd) in IRIX 6.4 and earlier allows attackers to cause a den (no CVSS)
- [CVE-1999-1132](https://cve.now/CVE-1999-1132.md): Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information (no CVSS)
- [CVE-1999-1136](https://cve.now/CVE-1999-1136.md): Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predicti (no CVSS)
- [CVE-1999-1137](https://cve.now/CVE-1999-1137.md): The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which c (no CVSS)
- [CVE-1999-1138](https://cve.now/CVE-1999-1138.md): SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the (no CVSS)
- [CVE-1999-1139](https://cve.now/CVE-1999-1139.md): Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges (no CVSS)
- [CVE-1999-1140](https://cve.now/CVE-1999-1140.md): Buffer overflow in CrackLib 2.5 may allow local users to gain root privileges via a long GECOS field. (no CVSS)
- [CVE-1999-1142](https://cve.now/CVE-1999-1142.md): SunOS 4.1.2 and earlier allows local users to gain privileges via "LD\_\*" environmental variables to certain dynamically linked setuid or set (no CVSS)
- [CVE-1999-1143](https://cve.now/CVE-1999-1143.md): Vulnerability in runtime linker program rld in SGI IRIX 6.x and earlier allows local users to gain privileges via setuid and setgid programs (no CVSS)
- [CVE-1999-1144](https://cve.now/CVE-1999-1144.md): Certain files in MPower in HP-UX 10.x are installed with insecure permissions, which allows local users to gain privileges. (no CVSS)
- [CVE-1999-1145](https://cve.now/CVE-1999-1145.md): Vulnerability in Glance programs in GlancePlus for HP-UX 10.20 and earlier allows local users to access arbitrary files and gain privileges. (no CVSS)
- [CVE-1999-1146](https://cve.now/CVE-1999-1146.md): Vulnerability in Glance and gpm programs in GlancePlus for HP-UX 9.x and earlier allows local users to access arbitrary files and gain privi (no CVSS)
- [CVE-1999-1147](https://cve.now/CVE-1999-1147.md): Buffer overflow in Platinum Policy Compliance Manager (PCM) 7.0 allows remote attackers to execute arbitrary commands via a long string to t (no CVSS)
- [CVE-1999-1148](https://cve.now/CVE-1999-1148.md): FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connec (no CVSS)
- [CVE-1999-1156](https://cve.now/CVE-1999-1156.md): BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-n (no CVSS)
- [CVE-1999-1157](https://cve.now/CVE-1999-1157.md): Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, (no CVSS)
- [CVE-1999-1159](https://cve.now/CVE-1999-1159.md): SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root. (no CVSS)
- [CVE-1999-1160](https://cve.now/CVE-1999-1160.md): Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. (no CVSS)
- [CVE-1999-1161](https://cve.now/CVE-1999-1161.md): Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump. (no CVSS)
- [CVE-1999-1162](https://cve.now/CVE-1999-1162.md): Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log (no CVSS)
- [CVE-1999-1163](https://cve.now/CVE-1999-1163.md): Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support (no CVSS)
- [CVE-1999-1167](https://cve.now/CVE-1999-1167.md): Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pa (no CVSS)
- [CVE-1999-1175](https://cve.now/CVE-1999-1175.md): Web Cache Control Protocol (WCCP) in Cisco Cache Engine for Cisco IOS 11.2 and earlier does not use authentication, which allows remote atta (no CVSS)
- [CVE-1999-1177](https://cve.now/CVE-1999-1177.md): Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (no CVSS)
- [CVE-1999-1181](https://cve.now/CVE-1999-1181.md): Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1188](https://cve.now/CVE-1999-1188.md): mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added (no CVSS)
- [CVE-1999-1191](https://cve.now/CVE-1999-1191.md): Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. (no CVSS)
- [CVE-1999-1192](https://cve.now/CVE-1999-1192.md): Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. (no CVSS)
- [CVE-1999-1193](https://cve.now/CVE-1999-1193.md): The "me" user in NeXT NeXTstep 2.1 and earlier has wheel group privileges, which could allow the me user to use the su command to become roo (no CVSS)
- [CVE-1999-1194](https://cve.now/CVE-1999-1194.md): chroot in Digital Ultrix 4.1 and 4.0 is insecurely installed, which allows local users to gain privileges. (no CVSS)
- [CVE-1999-1197](https://cve.now/CVE-1999-1197.md): TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow (no CVSS)
- [CVE-1999-1198](https://cve.now/CVE-1999-1198.md): BuildDisk program on NeXT systems before 2.0 does not prompt users for the root password, which allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1203](https://cve.now/CVE-1999-1203.md): Multilink PPP for ISDN dialup users in Ascend before 4.6 allows remote attackers to cause a denial of service via a spoofed endpoint identif (no CVSS)
- [CVE-1999-1204](https://cve.now/CVE-1999-1204.md): Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could pr (no CVSS)
- [CVE-1999-1205](https://cve.now/CVE-1999-1205.md): nettune in HP-UX 10.01 and 10.00 is installed setuid root, which allows local users to cause a denial of service by modifying critical netwo (no CVSS)
- [CVE-1999-1208](https://cve.now/CVE-1999-1208.md): Buffer overflow in ping in AIX 4.2 and earlier allows local users to gain root privileges via a long command line argument. (no CVSS)
- [CVE-1999-1209](https://cve.now/CVE-1999-1209.md): Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1214](https://cve.now/CVE-1999-1214.md): The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows (no CVSS)
- [CVE-1999-1215](https://cve.now/CVE-1999-1215.md): LOGIN.EXE program in Novell Netware 4.0 and 4.01 temporarily writes user name and password information to disk, which could allow local user (no CVSS)
- [CVE-1999-1222](https://cve.now/CVE-1999-1222.md): Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address (no CVSS)
- [CVE-1999-1223](https://cve.now/CVE-1999-1223.md): IIS 3.0 allows remote attackers to cause a denial of service via a request to an ASP page in which the URL contains a large number of / (for (no CVSS)
- [CVE-1999-1226](https://cve.now/CVE-1999-1226.md): Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a l (no CVSS)
- [CVE-1999-1233](https://cve.now/CVE-1999-1233.md): IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS (no CVSS)
- [CVE-1999-1243](https://cve.now/CVE-1999-1243.md): SGI Desktop Permissions Tool in IRIX 6.0.1 and earlier allows local users to modify permissions for arbitrary files and gain privileges. (no CVSS)
- [CVE-1999-1246](https://cve.now/CVE-1999-1246.md): Direct Mailer feature in Microsoft Site Server 3.0 saves user domain names and passwords in plaintext in the TMLBQueue network share, which (no CVSS)
- [CVE-1999-1249](https://cve.now/CVE-1999-1249.md): movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges. (no CVSS)
- [CVE-1999-1258](https://cve.now/CVE-1999-1258.md): rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensi (no CVSS)
- [CVE-1999-1259](https://cve.now/CVE-1999-1259.md): Microsoft Office 98, Macintosh Edition, does not properly initialize the disk space used by Office 98 files and effectively inserts data fro (no CVSS)
- [CVE-1999-1262](https://cve.now/CVE-1999-1262.md): Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, whi (no CVSS)
- [CVE-1999-1263](https://cve.now/CVE-1999-1263.md): Metamail before 2.7-7.2 allows remote attackers to overwrite arbitrary files via an e-mail message containing a uuencoded attachment that sp (no CVSS)
- [CVE-1999-1276](https://cve.now/CVE-1999-1276.md): fte-console in the fte package before 0.46b-4.1 does not drop root privileges, which allows local users to gain root access via the virtual (no CVSS)
- [CVE-1999-1279](https://cve.now/CVE-1999-1279.md): An interaction between the AS/400 shared folders feature and Microsoft SNA Server 3.0 and earlier allows users to view each other's folders (no CVSS)
- [CVE-1999-1284](https://cve.now/CVE-1999-1284.md): NukeNabber allows remote attackers to cause a denial of service by connecting to the NukeNabber port (1080) without sending any data, which (no CVSS)
- [CVE-1999-1288](https://cve.now/CVE-1999-1288.md): Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bi (no CVSS)
- [CVE-1999-1290](https://cve.now/CVE-1999-1290.md): Buffer overflow in nftp FTP client version 1.40 allows remote malicious FTP servers to cause a denial of service, and possibly execute arbit (no CVSS)
- [CVE-1999-1294](https://cve.now/CVE-1999-1294.md): Office Shortcut Bar (OSB) in Windows 3.51 enables backup and restore permissions, which are inherited by programs such as File Manager that (no CVSS)
- [CVE-1999-1297](https://cve.now/CVE-1999-1297.md): cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed (no CVSS)
- [CVE-1999-1298](https://cve.now/CVE-1999-1298.md): Sysinstall in FreeBSD 2.2.1 and earlier, when configuring anonymous FTP, creates the ftp user without a password and with /bin/date as the s (no CVSS)
- [CVE-1999-1301](https://cve.now/CVE-1999-1301.md): A design flaw in the Z-Modem protocol allows the remote sender of a file to execute arbitrary programs on the client, as implemented in rz i (no CVSS)
- [CVE-1999-1309](https://cve.now/CVE-1999-1309.md): Sendmail before 8.6.7 allows local users to gain root access via a large value in the debug (-d) command line option. (no CVSS)
- [CVE-1999-1316](https://cve.now/CVE-1999-1316.md): Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker t (no CVSS)
- [CVE-1999-1317](https://cve.now/CVE-1999-1317.md): Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \\?? object folder using a d (no CVSS)
- [CVE-1999-1318](https://cve.now/CVE-1999-1318.md): /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain (no CVSS)
- [CVE-1999-1320](https://cve.now/CVE-1999-1320.md): Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing. (no CVSS)
- [CVE-1999-1321](https://cve.now/CVE-1999-1321.md): Buffer overflow in ssh 1.2.26 client with Kerberos V enabled could allow remote attackers to cause a denial of service or execute arbitrary (no CVSS)
- [CVE-1999-1324](https://cve.now/CVE-1999-1324.md): VAXstations running Open VMS 5.3 through 5.5-2 with VMS DECwindows or MOTIF do not properly disable access to user accounts that exceed the (no CVSS)
- [CVE-1999-1325](https://cve.now/CVE-1999-1325.md): SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain pri (no CVSS)
- [CVE-1999-1326](https://cve.now/CVE-1999-1326.md): wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR (abort file transfer) command is executed during a file transfer, whic (no CVSS)
- [CVE-1999-1327](https://cve.now/CVE-1999-1327.md): Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental varia (no CVSS)
- [CVE-1999-1328](https://cve.now/CVE-1999-1328.md): linuxconf before 1.11.r11-rh3 on Red Hat Linux 5.1 allows local users to overwrite arbitrary files and gain root access via a symlink attack (no CVSS)
- [CVE-1999-1329](https://cve.now/CVE-1999-1329.md): Buffer overflow in SysVInit in Red Hat Linux 5.1 and earlier allows local users to gain privileges. (no CVSS)
- [CVE-1999-1330](https://cve.now/CVE-1999-1330.md): The snprintf function in the db library 1.85.4 ignores the size parameter, which could allow attackers to exploit buffer overflows that woul (no CVSS)
- [CVE-1999-1331](https://cve.now/CVE-1999-1331.md): netcfg 2.16-1 in Red Hat Linux 4.2 allows the Ethernet interface to be controlled by users on reboot when an option is set, which allows loc (no CVSS)
- [CVE-1999-1332](https://cve.now/CVE-1999-1332.md): gzexe in the gzip package on Red Hat Linux 5.0 and earlier allows local users to overwrite files of other users via a symlink attack on a te (no CVSS)
- [CVE-1999-1333](https://cve.now/CVE-1999-1333.md): automatic download option in ncftp 2.4.2 FTP client in Red Hat Linux 5.0 and earlier allows remote attackers to execute arbitrary commands v (no CVSS)
- [CVE-1999-1335](https://cve.now/CVE-1999-1335.md): snmpd server in cmu-snmp SNMP package before 3.3-1 in Red Hat Linux 4.0 is configured to allow remote attackers to read and write sensitive (no CVSS)
- [CVE-1999-1336](https://cve.now/CVE-1999-1336.md): 3Com HiPer Access Router Card (HiperARC) 4.0 through 4.2.29 allows remote attackers to cause a denial of service (reboot) via a flood of IAC (no CVSS)
- [CVE-1999-1339](https://cve.now/CVE-1999-1339.md): Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows (no CVSS)
- [CVE-1999-1341](https://cve.now/CVE-1999-1341.md): Linux kernel before 2.3.18 or 2.2.13pre15, with SLIP and PPP options, allows local unprivileged users to forge IP packets via the TIOCSETD o (no CVSS)
- [CVE-1999-1351](https://cve.now/CVE-1999-1351.md): Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick \<soundname\> requests" option enabled allows remote att (no CVSS)
- [CVE-1999-1356](https://cve.now/CVE-1999-1356.md): Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption (Leg (no CVSS)
- [CVE-1999-1358](https://cve.now/CVE-1999-1358.md): When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is n (no CVSS)
- [CVE-1999-1359](https://cve.now/CVE-1999-1359.md): When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for gl (no CVSS)
- [CVE-1999-1360](https://cve.now/CVE-1999-1360.md): Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mo (no CVSS)
- [CVE-1999-1363](https://cve.now/CVE-1999-1363.md): Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on (no CVSS)
- [CVE-1999-1379](https://cve.now/CVE-1999-1379.md): DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces (no CVSS)
- [CVE-1999-1380](https://cve.now/CVE-1999-1380.md): Symantec Norton Utilities 2.0 for Windows 95 marks the TUNEOCX.OCX ActiveX control as safe for scripting, which allows remote attackers to e (no CVSS)
- [CVE-1999-1382](https://cve.now/CVE-1999-1382.md): NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to ga (no CVSS)
- [CVE-1999-1384](https://cve.now/CVE-1999-1384.md): Indigo Magic System Tour in the SGI system tour package (systour) for IRIX 5.x through 6.3 allows local users to gain root privileges via a (no CVSS)
- [CVE-1999-1385](https://cve.now/CVE-1999-1385.md): Buffer overflow in ppp program in FreeBSD 2.1 and earlier allows local users to gain privileges via a long HOME environment variable. (no CVSS)
- [CVE-1999-1386](https://cve.now/CVE-1999-1386.md): Perl 5.004\_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via (no CVSS)
- [CVE-1999-1402](https://cve.now/CVE-1999-1402.md): The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, (no CVSS)
- [CVE-1999-1407](https://cve.now/CVE-1999-1407.md): ifdhcpc-done script for configuring DHCP on Red Hat Linux 5 allows local users to append text to arbitrary files via a symlink attack on the (no CVSS)
- [CVE-1999-1409](https://cve.now/CVE-1999-1409.md): The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at (no CVSS)
- [CVE-1999-1411](https://cve.now/CVE-1999-1411.md): The installation of the fsp package 2.71-10 in Debian GNU/Linux 2.0 adds the anonymous FTP user without notifying the administrator, which c (no CVSS)
- [CVE-1999-1414](https://cve.now/CVE-1999-1414.md): IBM Netfinity Remote Control allows local users to gain administrator privileges by starting programs from the process manager, which runs w (no CVSS)
- [CVE-1999-1419](https://cve.now/CVE-1999-1419.md): Buffer overflow in nss\_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges. (no CVSS)
- [CVE-1999-1423](https://cve.now/CVE-1999-1423.md): ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through th (no CVSS)
- [CVE-1999-1432](https://cve.now/CVE-1999-1432.md): Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, wh (no CVSS)
- [CVE-1999-1433](https://cve.now/CVE-1999-1433.md): HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log (no CVSS)
- [CVE-1999-1437](https://cve.now/CVE-1999-1437.md): ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the targ (no CVSS)
- [CVE-1999-1452](https://cve.now/CVE-1999-1452.md): GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstatio (no CVSS)
- [CVE-1999-1455](https://cve.now/CVE-1999-1455.md): RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user come (no CVSS)
- [CVE-1999-1456](https://cve.now/CVE-1999-1456.md): thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) c (no CVSS)
- [CVE-1999-1472](https://cve.now/CVE-1999-1472.md): Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynam (no CVSS)
- [CVE-1999-1473](https://cve.now/CVE-1999-1473.md): When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to th (no CVSS)
- [CVE-1999-1476](https://cve.now/CVE-1999-1476.md): A bug in Intel Pentium processor (MMX and Overdrive) allows local users to cause a denial of service (hang) in Intel-based operating systems (no CVSS)
- [CVE-1999-1478](https://cve.now/CVE-1999-1478.md): The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that inc (no CVSS)
- [CVE-1999-1481](https://cve.now/CVE-1999-1481.md): Squid 2.2.STABLE5 and below, when using external authentication, allows attackers to bypass access controls via a newline in the user/passwo (no CVSS)
- [CVE-1999-1488](https://cve.now/CVE-1999-1488.md): sdrd daemon in IBM SP2 System Data Repository (SDR) allows remote attackers to read files without authentication. (no CVSS)
- [CVE-1999-1494](https://cve.now/CVE-1999-1494.md): colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument. (no CVSS)
- [CVE-1999-1507](https://cve.now/CVE-1999-1507.md): Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash. (no CVSS)
- [CVE-1999-1512](https://cve.now/CVE-1999-1512.md): The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message w (no CVSS)
- [CVE-1999-1530](https://cve.now/CVE-1999-1530.md): cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site (no CVSS)
- [CVE-1999-1531](https://cve.now/CVE-1999-1531.md): Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a l (no CVSS)
- [CVE-1999-1535](https://cve.now/CVE-1999-1535.md): Buffer overflow in AspUpload.dll in Persits Software AspUpload before 1.4.0.2 allows remote attackers to cause a denial of service, and poss (no CVSS)
- [CVE-1999-1542](https://cve.now/CVE-1999-1542.md): RPMMail before 1.4 allows remote attackers to execute commands via an e-mail message with shell metacharacters in the "MAIL FROM" command. (no CVSS)
- [CVE-1999-1550](https://cve.now/CVE-1999-1550.md): bigconf.conf in F5 BIG/ip 2.1.2 and earlier allows remote attackers to read arbitrary files by specifying the target file in the "file" para (no CVSS)
- [CVE-1999-1565](https://cve.now/CVE-1999-1565.md): Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. (no CVSS)
- [CVE-2000-0006](https://cve.now/CVE-2000-0006.md): strace allows local users to read arbitrary files via memory mapped file names. (no CVSS)
- [CVE-2000-0007](https://cve.now/CVE-2000-0007.md): Trend Micro PC-Cillin does not restrict access to its internal proxy port, allowing remote attackers to conduct a denial of service. (no CVSS)
- [CVE-2000-0027](https://cve.now/CVE-2000-0027.md): IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack. (no CVSS)
- [CVE-2000-0180](https://cve.now/CVE-2000-0180.md): Sojourn search engine allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2000-0290](https://cve.now/CVE-2000-0290.md): Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request. (no CVSS)
- [CVE-2000-0298](https://cve.now/CVE-2000-0298.md): The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users dire (no CVSS)
- [CVE-2000-0324](https://cve.now/CVE-2000-0324.md): pcAnywhere 8.x and 9.0 allows remote attackers to cause a denial of service via a TCP SYN scan, e.g. (no CVSS)
- [CVE-2000-0457](https://cve.now/CVE-2000-0457.md): ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spac (no CVSS)
- [CVE-2000-0551](https://cve.now/CVE-2000-0551.md): The file transfer mechanism in Danware NetOp 6.0 does not provide authentication, which allows remote attackers to access and modify arbitra (no CVSS)
- [CVE-2000-0570](https://cve.now/CVE-2000-0570.md): FirstClass Internet Services server 5.770, and other versions before 6.1, allows remote attackers to cause a denial of service by sending an (no CVSS)
- [CVE-2000-0575](https://cve.now/CVE-2000-0575.md): SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who (no CVSS)
- [CVE-2000-0581](https://cve.now/CVE-2000-0581.md): Windows 2000 Telnet Server allows remote attackers to cause a denial of service by sending a continuous stream of binary zeros, which causes (no CVSS)
- [CVE-2000-0593](https://cve.now/CVE-2000-0593.md): WinProxy 2.0 and 2.0.1 allows remote attackers to cause a denial of service by sending an HTTP GET request without listing an HTTP version n (no CVSS)
- [CVE-2000-0600](https://cve.now/CVE-2000-0600.md): Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed (no CVSS)
- [CVE-2000-0615](https://cve.now/CVE-2000-0615.md): LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files. (no CVSS)
- [CVE-2000-0619](https://cve.now/CVE-2000-0619.md): Top Layer AppSwitch 2500 allows remote attackers to cause a denial of service via malformed ICMP packets. (no CVSS)
- [CVE-2000-0662](https://cve.now/CVE-2000-0662.md): Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using t (no CVSS)
- [CVE-2000-0699](https://cve.now/CVE-2000-0699.md): Format string vulnerability in ftpd in HP-UX 10.20 allows remote attackers to cause a denial of service or execute arbitrary commands via fo (no CVSS)
- [CVE-2000-0739](https://cve.now/CVE-2000-0739.md): Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbi (no CVSS)
- [CVE-2000-0740](https://cve.now/CVE-2000-0740.md): Buffer overflow in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2000-0741](https://cve.now/CVE-2000-0741.md): Format string vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2000-0753](https://cve.now/CVE-2000-0753.md): The Microsoft Outlook mail client identifies the physical path of the sender's machine within a winmail.dat attachment to Rich Text Format ( (no CVSS)
- [CVE-2000-0776](https://cve.now/CVE-2000-0776.md): Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. (no CVSS)
- [CVE-2000-0788](https://cve.now/CVE-2000-0788.md): The Mail Merge tool in Microsoft Word does not prompt the user before executing Visual Basic (VBA) scripts in an Access database, which coul (no CVSS)
- [CVE-2000-0790](https://cve.now/CVE-2000-0790.md): The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs (no CVSS)
- [CVE-2000-0795](https://cve.now/CVE-2000-0795.md): Buffer overflow in lpstat in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long -n option. (no CVSS)
- [CVE-2000-0796](https://cve.now/CVE-2000-0796.md): Buffer overflow in dmplay in IRIX 6.2 and 6.3 allows local users to gain root privileges via a long command line option. (no CVSS)
- [CVE-2000-0825](https://cve.now/CVE-2000-0825.md): Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is se (no CVSS)
- [CVE-2000-0830](https://cve.now/CVE-2000-0830.md): annclist.exe in webTV for Windows allows remote attackers to cause a denial of service by via a large, malformed UDP packet to ports 22701 t (no CVSS)
- [CVE-2000-0838](https://cve.now/CVE-2000-0838.md): Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request. (no CVSS)
- [CVE-2000-0839](https://cve.now/CVE-2000-0839.md): WinCOM LPD 1.00.90 allows remote attackers to cause a denial of service via a large number of LPD options to the LPD port (515). (no CVSS)
- [CVE-2000-0859](https://cve.now/CVE-2000-0859.md): The web configuration server for NTMail V5 and V6 allows remote attackers to cause a denial of service via a series of partial HTTP requests (no CVSS)
- [CVE-2000-0891](https://cve.now/CVE-2000-0891.md): A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email (no CVSS)
- [CVE-2000-0892](https://cve.now/CVE-2000-0892.md): Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or (no CVSS)
- [CVE-2000-1101](https://cve.now/CVE-2000-1101.md): Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local us (no CVSS)
- [CVE-2000-1111](https://cve.now/CVE-2000-1111.md): Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to ca (no CVSS)
- [CVE-2000-1190](https://cve.now/CVE-2000-1190.md): imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. (no CVSS)
- [CVE-2000-1195](https://cve.now/CVE-2000-1195.md): telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnet (no CVSS)
- [CVE-2000-1196](https://cve.now/CVE-2000-1196.md): PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in (no CVSS)
- [CVE-2000-1200](https://cve.now/CVE-2000-1200.md): Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy funct (no CVSS)
- [CVE-2001-0001](https://cve.now/CVE-2001-0001.md): cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authent (no CVSS)
- [CVE-2001-0007](https://cve.now/CVE-2001-0007.md): Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administr (no CVSS)
- [CVE-2001-0018](https://cve.now/CVE-2001-0018.md): Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2001-0094](https://cve.now/CVE-2001-0094.md): Buffer overflow in kdc\_reply\_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerb (no CVSS)
- [CVE-2001-0122](https://cve.now/CVE-2001-0122.md): Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows r (no CVSS)
- [CVE-2001-0156](https://cve.now/CVE-2001-0156.md): VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitra (no CVSS)
- [CVE-2001-0204](https://cve.now/CVE-2001-0204.md): Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP p (no CVSS)
- [CVE-2001-0236](https://cve.now/CVE-2001-0236.md): Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" (no CVSS)
- [CVE-2001-0252](https://cve.now/CVE-2001-0252.md): iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that cont (no CVSS)
- [CVE-2001-0265](https://cve.now/CVE-2001-0265.md): ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored fi (no CVSS)
- [CVE-2001-0269](https://cve.now/CVE-2001-0269.md): pam\_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password. (no CVSS)
- [CVE-2001-0276](https://cve.now/CVE-2001-0276.md): ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly call (no CVSS)
- [CVE-2001-0280](https://cve.now/CVE-2001-0280.md): Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command. (no CVSS)
- [CVE-2001-0321](https://cve.now/CVE-2001-0321.md): opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl p (no CVSS)
- [CVE-2001-0327](https://cve.now/CVE-2001-0327.md): iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or ca (no CVSS)
- [CVE-2001-0364](https://cve.now/CVE-2001-0364.md): SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous co (no CVSS)
- [CVE-2001-0365](https://cve.now/CVE-2001-0365.md): Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content (no CVSS)
- [CVE-2001-0366](https://cve.now/CVE-2001-0366.md): saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, wh (no CVSS)
- [CVE-2001-0371](https://cve.now/CVE-2001-0371.md): Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data avail (no CVSS)
- [CVE-2001-0373](https://cve.now/CVE-2001-0373.md): The default configuration of the Dr. (no CVSS)
- [CVE-2001-0386](https://cve.now/CVE-2001-0386.md): AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory. (no CVSS)
- [CVE-2001-0394](https://cve.now/CVE-2001-0394.md): Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to (no CVSS)
- [CVE-2001-0407](https://cve.now/CVE-2001-0407.md): Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a dat (no CVSS)
- [CVE-2001-0416](https://cve.now/CVE-2001-0416.md): sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar (no CVSS)
- [CVE-2001-0422](https://cve.now/CVE-2001-0422.md): Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable. (no CVSS)
- [CVE-2001-0442](https://cve.now/CVE-2001-0442.md): Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly ex (no CVSS)
- [CVE-2001-0444](https://cve.now/CVE-2001-0444.md): Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the r (no CVSS)
- [CVE-2001-0449](https://cve.now/CVE-2001-0449.md): Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail comm (no CVSS)
- [CVE-2001-0461](https://cve.now/CVE-2001-0461.md): template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metachara (no CVSS)
- [CVE-2001-0463](https://cve.now/CVE-2001-0463.md): Directory traversal vulnerability in cal\_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0487](https://cve.now/CVE-2001-0487.md): AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection. (no CVSS)
- [CVE-2001-0493](https://cve.now/CVE-2001-0493.md): Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux. (no CVSS)
- [CVE-2001-0497](https://cve.now/CVE-2001-0497.md): dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key (no CVSS)
- [CVE-2001-0500](https://cve.now/CVE-2001-0500.md): Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attacke (no CVSS)
- [CVE-2001-0501](https://cve.now/CVE-2001-0501.md): Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manne (no CVSS)
- [CVE-2001-0502](https://cve.now/CVE-2001-0502.md): Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal (no CVSS)
- [CVE-2001-0503](https://cve.now/CVE-2001-0503.md): Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to (no CVSS)
- [CVE-2001-0504](https://cve.now/CVE-2001-0504.md): Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to g (no CVSS)
- [CVE-2001-0506](https://cve.now/CVE-2001-0506.md): Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for (no CVSS)
- [CVE-2001-0507](https://cve.now/CVE-2001-0507.md): IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse fi (no CVSS)
- [CVE-2001-0513](https://cve.now/CVE-2001-0513.md): Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, wh (no CVSS)
- [CVE-2001-0514](https://cve.now/CVE-2001-0514.md): SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community s (no CVSS)
- [CVE-2001-0517](https://cve.now/CVE-2001-0517.md): Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximu (no CVSS)
- [CVE-2001-0518](https://cve.now/CVE-2001-0518.md): Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracl (no CVSS)
- [CVE-2001-0522](https://cve.now/CVE-2001-0522.md): Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format str (no CVSS)
- [CVE-2001-0525](https://cve.now/CVE-2001-0525.md): Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileg (no CVSS)
- [CVE-2001-0526](https://cve.now/CVE-2001-0526.md): Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWIN (no CVSS)
- [CVE-2001-0527](https://cve.now/CVE-2001-0527.md): DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines (no CVSS)
- [CVE-2001-0528](https://cve.now/CVE-2001-0528.md): Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs (no CVSS)
- [CVE-2001-0529](https://cve.now/CVE-2001-0529.md): OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. (no CVSS)
- [CVE-2001-0530](https://cve.now/CVE-2001-0530.md): Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded UR (no CVSS)
- [CVE-2001-0533](https://cve.now/CVE-2001-0533.md): Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variabl (no CVSS)
- [CVE-2001-0537](https://cve.now/CVE-2001-0537.md): HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is (no CVSS)
- [CVE-2001-0538](https://cve.now/CVE-2001-0538.md): Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a mal (no CVSS)
- [CVE-2001-0540](https://cve.now/CVE-2001-0540.md): Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via (no CVSS)
- [CVE-2001-0541](https://cve.now/CVE-2001-0541.md): Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Wind (no CVSS)
- [CVE-2001-0543](https://cve.now/CVE-2001-0543.md): Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via (no CVSS)
- [CVE-2001-0544](https://cve.now/CVE-2001-0544.md): IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type h (no CVSS)
- [CVE-2001-0545](https://cve.now/CVE-2001-0545.md): IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a l (no CVSS)
- [CVE-2001-0546](https://cve.now/CVE-2001-0546.md): Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a (no CVSS)
- [CVE-2001-0547](https://cve.now/CVE-2001-0547.md): Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial (no CVSS)
- [CVE-2001-0549](https://cve.now/CVE-2001-0549.md): Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords. (no CVSS)
- [CVE-2001-0554](https://cve.now/CVE-2001-0554.md): Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a (no CVSS)
- [CVE-2001-0558](https://cve.now/CVE-2001-0558.md): T. (no CVSS)
- [CVE-2001-0559](https://cve.now/CVE-2001-0559.md): crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could (no CVSS)
- [CVE-2001-0560](https://cve.now/CVE-2001-0560.md): Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (\> 20 char (no CVSS)
- [CVE-2001-0563](https://cve.now/CVE-2001-0563.md): ElectroSystems Engineering Inc. (no CVSS)
- [CVE-2001-0564](https://cve.now/CVE-2001-0564.md): APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of (no CVSS)
- [CVE-2001-0565](https://cve.now/CVE-2001-0565.md): Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option. (no CVSS)
- [CVE-2001-0567](https://cve.now/CVE-2001-0567.md): Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mapping (no CVSS)
- [CVE-2001-0573](https://cve.now/CVE-2001-0573.md): lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain (no CVSS)
- [CVE-2001-0574](https://cve.now/CVE-2001-0574.md): Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in (no CVSS)
- [CVE-2001-0585](https://cve.now/CVE-2001-0585.md): Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (\>= 255 characters) URL request to port 8000 or port (no CVSS)
- [CVE-2001-0586](https://cve.now/CVE-2001-0586.md): TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combina (no CVSS)
- [CVE-2001-0589](https://cve.now/CVE-2001-0589.md): NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via spe (no CVSS)
- [CVE-2001-0590](https://cve.now/CVE-2001-0590.md): Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a mal (no CVSS, org.apache.tomcat:tomcat-servlet-api)
- [CVE-2001-0591](https://cve.now/CVE-2001-0591.md): Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read o (no CVSS)
- [CVE-2001-0593](https://cve.now/CVE-2001-0593.md): Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template param (no CVSS)
- [CVE-2001-0594](https://cve.now/CVE-2001-0594.md): kcms\_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command lin (no CVSS)
- [CVE-2001-0595](https://cve.now/CVE-2001-0595.md): Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS\_PROFILE (no CVSS)
- [CVE-2001-0596](https://cve.now/CVE-2001-0596.md): Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascr (no CVSS)
- [CVE-2001-0611](https://cve.now/CVE-2001-0611.md): Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without n (no CVSS)
- [CVE-2001-0613](https://cve.now/CVE-2001-0613.md): Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL req (no CVSS)
- [CVE-2001-0615](https://cve.now/CVE-2001-0615.md): Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary fil (no CVSS)
- [CVE-2001-0616](https://cve.now/CVE-2001-0616.md): Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which incl (no CVSS)
- [CVE-2001-0621](https://cve.now/CVE-2001-0621.md): The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FT (no CVSS)
- [CVE-2001-0622](https://cve.now/CVE-2001-0622.md): The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote atta (no CVSS)
- [CVE-2001-0625](https://cve.now/CVE-2001-0625.md): ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdown (no CVSS)
- [CVE-2001-0626](https://cve.now/CVE-2001-0626.md): O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL reque (no CVSS)
- [CVE-2001-0627](https://cve.now/CVE-2001-0627.md): vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. (no CVSS)
- [CVE-2001-0628](https://cve.now/CVE-2001-0628.md): Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the (no CVSS)
- [CVE-2001-0629](https://cve.now/CVE-2001-0629.md): HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges (no CVSS)
- [CVE-2001-0630](https://cve.now/CVE-2001-0630.md): Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (no CVSS)
- [CVE-2001-0631](https://cve.now/CVE-2001-0631.md): Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '\<@\>' in the 'F (no CVSS)
- [CVE-2001-0634](https://cve.now/CVE-2001-0634.md): Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and crea (no CVSS)
- [CVE-2001-0635](https://cve.now/CVE-2001-0635.md): Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional p (no CVSS)
- [CVE-2001-0641](https://cve.now/CVE-2001-0641.md): Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S opti (no CVSS)
- [CVE-2001-0644](https://cve.now/CVE-2001-0644.md): Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which co (no CVSS)
- [CVE-2001-0646](https://cve.now/CVE-2001-0646.md): Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of (no CVSS)
- [CVE-2001-0648](https://cve.now/CVE-2001-0648.md): Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (.. (no CVSS)
- [CVE-2001-0650](https://cve.now/CVE-2001-0650.md): Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecogniz (no CVSS)
- [CVE-2001-0652](https://cve.now/CVE-2001-0652.md): Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESE (no CVSS)
- [CVE-2001-0653](https://cve.now/CVE-2001-0653.md): Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value (no CVSS)
- [CVE-2001-0658](https://cve.now/CVE-2001-0658.md): Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause (no CVSS)
- [CVE-2001-0659](https://cve.now/CVE-2001-0659.md): Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to (no CVSS)
- [CVE-2001-0660](https://cve.now/CVE-2001-0660.md): Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direc (no CVSS)
- [CVE-2001-0662](https://cve.now/CVE-2001-0662.md): RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request. (no CVSS)
- [CVE-2001-0663](https://cve.now/CVE-2001-0663.md): Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop (no CVSS)
- [CVE-2001-0664](https://cve.now/CVE-2001-0664.md): Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, (no CVSS)
- [CVE-2001-0665](https://cve.now/CVE-2001-0665.md): Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from (no CVSS)
- [CVE-2001-0666](https://cve.now/CVE-2001-0666.md): Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malfor (no CVSS)
- [CVE-2001-0667](https://cve.now/CVE-2001-0667.md): Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute command (CVSS 7.3)
- [CVE-2001-0668](https://cve.now/CVE-2001-0668.md): Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2001-0670](https://cve.now/CVE-2001-0670.md): Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitra (no CVSS)
- [CVE-2001-0675](https://cve.now/CVE-2001-0675.md): Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account co (no CVSS)
- [CVE-2001-0676](https://cve.now/CVE-2001-0676.md): Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a " (no CVSS)
- [CVE-2001-0677](https://cve.now/CVE-2001-0677.md): Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MI (no CVSS)
- [CVE-2001-0680](https://cve.now/CVE-2001-0680.md): Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web se (no CVSS)
- [CVE-2001-0682](https://cve.now/CVE-2001-0682.md): ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object (no CVSS)
- [CVE-2001-0685](https://cve.now/CVE-2001-0685.md): Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab tempor (no CVSS)
- [CVE-2001-0686](https://cve.now/CVE-2001-0686.md): Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable. (no CVSS)
- [CVE-2001-0690](https://cve.now/CVE-2001-0690.md): Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker (no CVSS)
- [CVE-2001-0692](https://cve.now/CVE-2001-0692.md): SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded (no CVSS)
- [CVE-2001-0696](https://cve.now/CVE-2001-0696.md): NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS d (no CVSS)
- [CVE-2001-0697](https://cve.now/CVE-2001-0697.md): NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command. (no CVSS)
- [CVE-2001-0698](https://cve.now/CVE-2001-0698.md): Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the (no CVSS)
- [CVE-2001-0699](https://cve.now/CVE-2001-0699.md): Buffer overflow in cb\_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a l (no CVSS)
- [CVE-2001-0700](https://cve.now/CVE-2001-0700.md): Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header. (no CVSS)
- [CVE-2001-0701](https://cve.now/CVE-2001-0701.md): Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument. (no CVSS)
- [CVE-2001-0706](https://cve.now/CVE-2001-0706.md): Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a (no CVSS)
- [CVE-2001-0710](https://cve.now/CVE-2001-0710.md): NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fra (no CVSS)
- [CVE-2001-0716](https://cve.now/CVE-2001-0716.md): Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2001-0717](https://cve.now/CVE-2001-0717.md): Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format str (no CVSS)
- [CVE-2001-0718](https://cve.now/CVE-2001-0718.md): Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restric (no CVSS)
- [CVE-2001-0719](https://cve.now/CVE-2001-0719.md): Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming F (no CVSS)
- [CVE-2001-0720](https://cve.now/CVE-2001-0720.md): Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file (no CVSS)
- [CVE-2001-0722](https://cve.now/CVE-2001-0722.md): Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie (no CVSS)
- [CVE-2001-0723](https://cve.now/CVE-2001-0723.md): Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulner (no CVSS)
- [CVE-2001-0728](https://cve.now/CVE-2001-0728.md): Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privi (no CVSS)
- [CVE-2001-0730](https://cve.now/CVE-2001-0730.md): split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with (no CVSS)
- [CVE-2001-0733](https://cve.now/CVE-2001-0733.md): The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sin (no CVSS)
- [CVE-2001-0738](https://cve.now/CVE-2001-0738.md): LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing n (no CVSS)
- [CVE-2001-0739](https://cve.now/CVE-2001-0739.md): Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow (no CVSS)
- [CVE-2001-0740](https://cve.now/CVE-2001-0740.md): 3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial (no CVSS)
- [CVE-2001-0745](https://cve.now/CVE-2001-0745.md): Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via J (no CVSS)
- [CVE-2001-0750](https://cve.now/CVE-2001-0750.md): Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999 (no CVSS)
- [CVE-2001-0751](https://cve.now/CVE-2001-0751.md): Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers (no CVSS)
- [CVE-2001-0752](https://cve.now/CVE-2001-0752.md): Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route o (no CVSS)
- [CVE-2001-0754](https://cve.now/CVE-2001-0754.md): Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, whic (no CVSS)
- [CVE-2001-0757](https://cve.now/CVE-2001-0757.md): Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set f (no CVSS)
- [CVE-2001-0760](https://cve.now/CVE-2001-0760.md): Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not pr (no CVSS)
- [CVE-2001-0764](https://cve.now/CVE-2001-0764.md): Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument. (no CVSS)
- [CVE-2001-0765](https://cve.now/CVE-2001-0765.md): BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to (no CVSS)
- [CVE-2001-0773](https://cve.now/CVE-2001-0773.md): Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests. (no CVSS)
- [CVE-2001-0774](https://cve.now/CVE-2001-0774.md): Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on t (no CVSS)
- [CVE-2001-0779](https://cve.now/CVE-2001-0779.md): Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. (no CVSS)
- [CVE-2001-0784](https://cve.now/CVE-2001-0784.md): Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (no CVSS)
- [CVE-2001-0787](https://cve.now/CVE-2001-0787.md): LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a l (no CVSS)
- [CVE-2001-0796](https://cve.now/CVE-2001-0796.md): SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malf (no CVSS)
- [CVE-2001-0801](https://cve.now/CVE-2001-0801.md): lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library. (no CVSS)
- [CVE-2001-0803](https://cve.now/CVE-2001-0803.md): Buffer overflow in the client connection routine of libDtSvc.so.1 in CDE Subprocess Control Service (dtspcd) allows remote attackers to exec (no CVSS)
- [CVE-2001-0804](https://cve.now/CVE-2001-0804.md): Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (no CVSS)
- [CVE-2001-0805](https://cve.now/CVE-2001-0805.md): Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2001-0806](https://cve.now/CVE-2001-0806.md): Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop (no CVSS)
- [CVE-2001-0815](https://cve.now/CVE-2001-0815.md): Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP (no CVSS)
- [CVE-2001-0816](https://cve.now/CVE-2001-0816.md): OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authori (no CVSS)
- [CVE-2001-0819](https://cve.now/CVE-2001-0819.md): A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email head (no CVSS)
- [CVE-2001-0822](https://cve.now/CVE-2001-0822.md): FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets. (no CVSS)
- [CVE-2001-0823](https://cve.now/CVE-2001-0823.md): The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES f (no CVSS)
- [CVE-2001-0828](https://cve.now/CVE-2001-0828.md): A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink (no CVSS)
- [CVE-2001-0830](https://cve.now/CVE-2001-0830.md): 6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2001-0833](https://cve.now/CVE-2001-0833.md): Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE\_HOME environment var (no CVSS)
- [CVE-2001-0834](https://cve.now/CVE-2001-0834.md): htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuratio (no CVSS)
- [CVE-2001-0836](https://cve.now/CVE-2001-0836.md): Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. (no CVSS)
- [CVE-2001-0843](https://cve.now/CVE-2001-0843.md): Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request. (no CVSS)
- [CVE-2001-0846](https://cve.now/CVE-2001-0846.md): Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator templa (no CVSS)
- [CVE-2001-0850](https://cve.now/CVE-2001-0850.md): A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could all (no CVSS)
- [CVE-2001-0851](https://cve.now/CVE-2001-0851.md): Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie. (no CVSS)
- [CVE-2001-0852](https://cve.now/CVE-2001-0852.md): TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header. (no CVSS)
- [CVE-2001-0857](https://cve.now/CVE-2001-0857.md): Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of o (no CVSS)
- [CVE-2001-0859](https://cve.now/CVE-2001-0859.md): 2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with w (no CVSS)
- [CVE-2001-0860](https://cve.now/CVE-2001-0860.md): Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtain (no CVSS)
- [CVE-2001-0861](https://cve.now/CVE-2001-0861.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption (no CVSS)
- [CVE-2001-0862](https://cve.now/CVE-2001-0862.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to byp (no CVSS)
- [CVE-2001-0863](https://cve.now/CVE-2001-0863.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets (no CVSS)
- [CVE-2001-0864](https://cve.now/CVE-2001-0864.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL w (no CVSS)
- [CVE-2001-0865](https://cve.now/CVE-2001-0865.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fra (no CVSS)
- [CVE-2001-0866](https://cve.now/CVE-2001-0866.md): Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on a (no CVSS)
- [CVE-2001-0867](https://cve.now/CVE-2001-0867.md): Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the (no CVSS)
- [CVE-2001-0874](https://cve.now/CVE-2001-0874.md): Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's dom (no CVSS)
- [CVE-2001-0875](https://cve.now/CVE-2001-0875.md): Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the di (no CVSS)
- [CVE-2001-0876](https://cve.now/CVE-2001-0876.md): Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NO (no CVSS)
- [CVE-2001-0877](https://cve.now/CVE-2001-0877.md): Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP a (no CVSS)
- [CVE-2001-0879](https://cve.now/CVE-2001-0879.md): Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service. (no CVSS)
- [CVE-2001-0954](https://cve.now/CVE-2001-0954.md): Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases t (no CVSS)
- [CVE-2001-0963](https://cve.now/CVE-2001-0963.md): Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a (no CVSS)
- [CVE-2001-0965](https://cve.now/CVE-2001-0965.md): glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large (no CVSS)
- [CVE-2001-0969](https://cve.now/CVE-2001-0969.md): ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow co (no CVSS)
- [CVE-2001-0973](https://cve.now/CVE-2001-0973.md): BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar fil (no CVSS)
- [CVE-2001-0980](https://cve.now/CVE-2001-0980.md): docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a ma (no CVSS)
- [CVE-2001-0982](https://cve.now/CVE-2001-0982.md): Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files o (no CVSS)
- [CVE-2001-0987](https://cve.now/CVE-2001-0987.md): Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by cau (no CVSS)
- [CVE-2001-0993](https://cve.now/CVE-2001-0993.md): sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure wit (no CVSS)
- [CVE-2001-0995](https://cve.now/CVE-2001-0995.md): PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to P (no CVSS)
- [CVE-2001-0998](https://cve.now/CVE-2001-0998.md): IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) t (no CVSS)
- [CVE-2001-1010](https://cve.now/CVE-2001-1010.md): Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary (no CVSS)
- [CVE-2001-1011](https://cve.now/CVE-2001-1011.md): index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID (no CVSS)
- [CVE-2001-1016](https://cve.now/CVE-2001-1016.md): PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly (no CVSS)
- [CVE-2001-1017](https://cve.now/CVE-2001-1017.md): rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original f (no CVSS)
- [CVE-2001-1020](https://cve.now/CVE-2001-1020.md): edit\_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in (no CVSS)
- [CVE-2001-1035](https://cve.now/CVE-2001-1035.md): Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news (no CVSS)
- [CVE-2001-1037](https://cve.now/CVE-2001-1037.md): Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain rest (no CVSS)
- [CVE-2001-1038](https://cve.now/CVE-2001-1038.md): Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to (no CVSS)
- [CVE-2001-1048](https://cve.now/CVE-2001-1048.md): AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variab (no CVSS)
- [CVE-2001-1049](https://cve.now/CVE-2001-1049.md): Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the (no CVSS)
- [CVE-2001-1054](https://cve.now/CVE-2001-1054.md): PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir v (no CVSS)
- [CVE-2001-1056](https://cve.now/CVE-2001-1056.md): IRC DCC helper in the ip\_masq\_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the (no CVSS)
- [CVE-2001-1063](https://cve.now/CVE-2001-1063.md): Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) comm (no CVSS)
- [CVE-2001-1067](https://cve.now/CVE-2001-1067.md): Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP requ (no CVSS)
- [CVE-2001-1075](https://cve.now/CVE-2001-1075.md): poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by (no CVSS)
- [CVE-2001-1080](https://cve.now/CVE-2001-1080.md): diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gai (no CVSS)
- [CVE-2002-0005](https://cve.now/CVE-2002-0005.md): Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.