February 2001

61 results · Feed

• Unscored —
  CVE-2001-0076

  register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL pa…

  Feb 2, 2001
• Unscored —
  CVE-2001-0030

  FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables fro…

  Feb 2, 2001
• Unscored —
  CVE-2001-0068

  Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEB…

  Feb 2, 2001
• Unscored —
  CVE-2001-0023 Public exploit EPSS 14%

  everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metachara…

  Feb 2, 2001
• Unscored —
  CVE-2001-0088

  common.inc.php in phpWebLog 0.4.2 does not properly initialize the $CONF array, which inadvertently sets the password t…

  Feb 2, 2001
• Unscored —
  CVE-2001-0098 Public exploit EPSS 78%

  Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long UR…

  Feb 2, 2001
• Unscored —
  CVE-2001-0067

  The installation of J-Pilot creates the .jpilot directory with the user's umask, which could allow local attackers to r…

  Feb 2, 2001
• Unscored —
  CVE-2001-0038 Public exploit

  Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive l…

  Feb 2, 2001
• Unscored —
  CVE-2001-0101

  Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.

  Feb 2, 2001
• Unscored —
  CVE-2001-0093 Public exploit

  Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental …

  Feb 2, 2001
• Unscored —
  CVE-2001-0027

  mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, wh…

  Feb 2, 2001
• Unscored —
  CVE-2001-0019

  Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to …

  Feb 2, 2001
• Unscored —
  CVE-2001-0103

  CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could a…

  Feb 2, 2001
• Unscored —
  CVE-2001-0070

  Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute ar…

  Feb 2, 2001
• Unscored —
  CVE-2001-0047

  The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install…

  Feb 2, 2001
• Unscored —
  CVE-2001-0024 Public exploit

  simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharact…

  Feb 2, 2001
• Unscored —
  CVE-2001-0102

  "Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups …

  Feb 2, 2001
• Unscored —
  CVE-2001-0073

  Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attacker…

  Feb 2, 2001
• Unscored —
  CVE-2000-0893

  The presence of the Distributed GL Daemon (dgld) service on port 5232 on SGI IRIX systems allows remote attackers to id…

  Feb 2, 2001
• Unscored —
  CVE-2000-0889

  Two Sun security certificates have been compromised, which could allow attackers to insert malicious code such as apple…

  Feb 2, 2001
• Unscored —
  CVE-2000-1090 EPSS 17%

  Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malf…

  Feb 2, 2001