Skip to content
OpenAdvisories

Archive

January 2001

Vulnerabilities first published in this month (UTC), newest first.

← December 2000 2001 / January February 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22232
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0287 Public exploit EPSS 11%

    The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in…

  • Unscored —
    CVE-2000-0944 Public exploit EPSS 11%

    CGI Script Center News Update 1.1 does not properly validate the original news administration password during a passwor…

  • Unscored —
    CVE-2000-0848 Public exploit

    Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via…

  • Unscored —
    CVE-2000-0869 Public exploit EPSS 51%

    The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbi…

  • Unscored —
    CVE-2000-0935 Public exploit

    Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attac…

  • Unscored —
    CVE-2000-0276 Public exploit

    BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37.

  • Unscored —
    CVE-2000-0972 Public exploit

    HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target fi…

  • Unscored —
    CVE-2000-0523 Public exploit

    Buffer overflow in the logging feature of EServ 2.9.2 and earlier allows an attacker to execute arbitrary commands via …

  • Unscored —
    CVE-2000-0973 Public exploit EPSS 18%

    Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arb…

  • Unscored —
    CVE-2000-0846 Public exploit

    Buffer overflow in Darxite 0.4 and earlier allows a remote attacker to execute arbitrary commands via a long username o…

  • Unscored —
    CVE-2000-0254 Public exploit

    The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configura…

  • Unscored —
    CVE-2000-0975 Public exploit

    Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitra…

  • Unscored —
    CVE-2000-0901 Public exploit

    Format string vulnerability in screen 3.9.5 and earlier allows local users to gain root privileges via format character…

  • Unscored —
    CVE-2000-0951 Public exploit EPSS 44%

    A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list dire…

  • Unscored —
    CVE-2000-0949 Public exploit

    Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary command…

  • Unscored —
    CVE-2000-0883 Public exploit

    The default configuration of mod_perl for Apache as installed on Mandrake Linux 6.1 through 7.1 sets the /perl/ directo…

  • Unscored —
    CVE-2000-0922 Public exploit

    Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier …

  • Unscored —
    CVE-2000-0953 Public exploit

    Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.

  • Unscored —
    CVE-2000-0884 Public exploit EPSS 63%

    IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comma…

  • Unscored —
    CVE-2000-0919 Public exploit

    Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2000-0824 Public exploit

    The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twic…

  • Unscored —
    CVE-2000-0887 Public exploit EPSS 23%

    named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone tra…

  • Unscored —
    CVE-2000-0993 Public exploit

    Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via …

  • Unscored —
    CVE-2000-0936 Public exploit

    Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, …

  • Unscored —
    CVE-2000-0958 Public exploit

    HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named win…

  • Unscored —
    CVE-2000-0930 Public exploit

    Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol w…

  • Unscored —
    CVE-2000-0048 Public exploit

    get_it program in Corel Linux Update allows local users to gain root access by specifying an alternate PATH for the cp …

  • Unscored —
    CVE-2000-0983 Public exploit EPSS 21%

    Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU util…

  • Unscored —
    CVE-2000-0917 Public exploit EPSS 79%

    Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2000-0702 Public exploit

    The net.init rc script in HP-UX 11.00 (S008net.init) allows local users to overwrite arbitrary files via a symlink atta…

  • Unscored —
    CVE-2000-0766 Public exploit

    Buffer overflow in vqSoft vqServer 1.4.49 allows remote attackers to cause a denial of service or possibly gain privile…

  • Unscored —
    CVE-2000-0873 Public exploit

    netstat in AIX 4.x.x does not properly restrict access to the -Zi option, which allows local users to clear network int…

  • Unscored —
    CVE-2000-0912 Public exploit

    MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specify…

  • Unscored —
    CVE-2000-0994 Public exploit

    Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local user…

  • Unscored —
    CVE-2000-0921 Public exploit

    Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read a…

  • Unscored —
    CVE-2000-0914 Public exploit

    OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.

  • Unscored —
    CVE-2000-0941 Public exploit EPSS 13%

    Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in…

  • Unscored —
    CVE-2000-0853 Public exploit

    YaBB Bulletin Board 9.1.2000 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

  • Unscored —
    CVE-2000-0844 Public exploit EPSS 16%

    Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which …

  • Unscored —
    CVE-2000-0278 Public exploit

    The SalesLogix Eviewer allows remote attackers to cause a denial of service by accessing the URL for the slxweb.dll adm…