Archive
2 February 2001
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary com…
-
Unscored —CVE-2001-0075 Public exploit
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2001-0097 Public exploit
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2001-0037 Public exploit
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL c…
-
Unscored —
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary comman…
-
Unscored —CVE-2001-0032 Public exploit
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain …
-
Unscored —CVE-2001-0074 Public exploit
Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2001-0084 Public exploit
GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could al…
-
Unscored —CVE-2001-0082 Public exploit
Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via ma…
-
Unscored —CVE-2001-0087 Public exploit
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which…
-
Unscored —
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users with…
-
Unscored —CVE-2001-0052 Public exploit
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.
-
Unscored —
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Servi…
-
Unscored —
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and poss…
-
Unscored —
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2001-0029 Public exploit
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitra…
-
Unscored —CVE-2001-0049 Public exploit
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of G…
-
Unscored —
Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service v…
-
Unscored —CVE-2001-0051 Public exploit
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote at…
-
Unscored —
MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel bu…
-
Unscored —
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long …
-
Unscored —
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on t…
-
Unscored —
BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting …
-
Unscored —
register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL pa…
-
Unscored —
FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables fro…
-
Unscored —
Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEB…
-
Unscored —
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metachara…
-
Unscored —
common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password t…
-
Unscored —
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long UR…
-
Unscored —
The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to r…
-
Unscored —CVE-2001-0038 Public exploit
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive l…
-
Unscored —
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.
-
Unscored —CVE-2001-0093 Public exploit
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental …
-
Unscored —
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, wh…
-
Unscored —
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to …
-
Unscored —
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could a…
-
Unscored —
Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute ar…
-
Unscored —
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install…
-
Unscored —CVE-2001-0024 Public exploit
simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharact…