Skip to content
OpenAdvisories

Archive

January 2001

Vulnerabilities first published in this month (UTC), newest first.

← December 2000 2001 / January February 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22232
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

90 results · Clear filters · Feed

  • Unscored —
    CVE-2000-0991 Public exploit

    Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute …

  • Unscored —
    CVE-2000-0967 Public exploit EPSS 21%

    PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2000-0979 Public exploit EPSS 75%

    File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a fil…

  • Unscored —
    CVE-2000-0886 Public exploit EPSS 69%

    IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name…

  • Unscored —
    CVE-2000-0920 Public exploit

    Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2000-0989 Public exploit

    Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2000-0992 Public exploit

    Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary fil…

    openssh Debian
  • Unscored —
    CVE-2000-0925 Public exploit

    The default installation of SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) installs the _private directory with w…

  • Unscored —
    CVE-2000-0908 Public exploit

    BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long A…

  • Unscored —
    CVE-2000-0977 Public exploit

    mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file…

  • Unscored —
    CVE-2000-0937 Public exploit

    Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but th…

  • Unscored —
    CVE-2000-0698 Public exploit

    Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user vi…

  • Unscored —
    CVE-2000-0924 Public exploit

    Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbit…

  • Unscored —
    CVE-2000-0909 Public exploit EPSS 12%

    Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2000-0834 Public exploit EPSS 40%

    The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to cap…

  • Unscored —
    CVE-2000-0679 Public exploit

    The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client…

  • Unscored —
    CVE-2000-0984 Public exploit

    The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service (crash and reload) via a…

  • Unscored —
    CVE-2000-0864 Public exploit

    Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change…

  • Unscored —
    CVE-2000-0865 Public exploit

    Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long ter…

  • Unscored —
    CVE-2000-0942 Public exploit EPSS 22%

    The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross …

  • Unscored —
    CVE-2000-0341 Public exploit

    ATRIUM Cassandra NNTP Server 1.10 allows remote attackers to cause a denial of service via a long login name.

  • Unscored —
    CVE-2000-0926 Public exploit

    SmartWin CyberOffice Shopping Cart 2 (aka CyberShop) allows remote attackers to modify price information by changing th…

  • Unscored —
    CVE-2000-0929 Public exploit EPSS 14%

    Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embe…

  • Unscored —
    CVE-2000-0851 Public exploit

    Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long …

  • Unscored —
    CVE-2000-1026 Public exploit

    Multiple buffer overflows in LBNL tcpdump allow remote attackers to execute arbitrary commands.

  • Unscored —
    CVE-2000-1054 Public exploit

    Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denia…

  • Unscored —
    CVE-2000-1014 Public exploit EPSS 12%

    Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attacke…

  • Unscored —
    CVE-2000-1094 Public exploit

    Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands vi…

  • Unscored —
    CVE-2000-1120 Public exploit

    Buffer overflow in digest command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands.

  • Unscored —
    CVE-2000-1074 Public exploit

    csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could …

  • Unscored —
    CVE-2000-1069 Public exploit

    pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the r…

  • Unscored —
    CVE-2000-1022 Public exploit

    The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP command…

  • Unscored —
    CVE-2000-1112 Public exploit EPSS 14%

    Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to ga…

  • Unscored —
    CVE-2000-1132 Public exploit

    DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a ma…

  • Unscored —
    CVE-2000-1140 Public exploit

    Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that the…

  • Unscored —
    CVE-2000-1016 Public exploit

    The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows…

  • Unscored —
    CVE-2000-1113 Public exploit EPSS 19%

    Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed…

  • Unscored —
    CVE-2000-1002 Public exploit

    POP3 daemon in Stalker CommuniGate Pro 3.3.2 generates different error messages for invalid usernames versus invalid pa…

  • Unscored —
    CVE-2000-1061 Public exploit EPSS 10%

    Microsoft Virtual Machine (VM) in Internet Explorer 4.x and 5.x allows an unsigned applet to create and use ActiveX con…

  • Unscored —
    CVE-2000-1050 Public exploit

    Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request…