Archive
February 2001
Vulnerabilities first published in this month (UTC), newest first.
23 results · Clear filters · Feed
-
Unscored —
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, …
-
Unscored —CVE-2001-0112 Public exploit
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
-
Unscored —CVE-2001-0114 Public exploit
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
-
Unscored —CVE-1999-0757 Public exploit
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the tem…
-
Unscored —CVE-2001-0075 Public exploit
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2001-0097 Public exploit
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2001-0037 Public exploit
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL c…
-
Unscored —CVE-2001-0032 Public exploit
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain …
-
Unscored —CVE-2001-0074 Public exploit
Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (do…
-
Unscored —CVE-2001-0084 Public exploit
GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could al…
-
Unscored —CVE-2001-0082 Public exploit
Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via ma…
-
Unscored —CVE-2001-0087 Public exploit
itetris/xitetris 1.6.2 and earlier trusts the PATH environmental variable to find and execute the gunzip program, which…
-
Unscored —CVE-2001-0052 Public exploit
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.
-
Unscored —
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2001-0029 Public exploit
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitra…
-
Unscored —CVE-2001-0049 Public exploit
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of G…
-
Unscored —CVE-2001-0051 Public exploit
IBM DB2 Universal Database version 6.1 creates an account with a default user name and password, which allows remote at…
-
Unscored —
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metachara…
-
Unscored —
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long UR…
-
Unscored —CVE-2001-0038 Public exploit
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive l…
-
Unscored —CVE-2001-0093 Public exploit
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental …
-
Unscored —CVE-2001-0024 Public exploit
simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharact…