Skip to content
OpenAdvisories

Archive

April 2001

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 445
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 

45 results · Feed

  • Unscored —
    CVE-2001-0302 Public exploit

    Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and po…

  • Unscored —

    Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST…

  • Unscored —

    tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL …

  • Unscored —

    Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allow…

  • Unscored —

    Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitr…

  • Unscored —
    CVE-2001-0324 Public exploit EPSS 14%

    Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that ope…

  • Unscored —

    mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell …

  • Unscored —

    The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions regist…

  • Unscored —

    bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administ…

  • Unscored —

    The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2001-0307 Public exploit

    Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shel…

  • Unscored —
    CVE-2001-0322 Public exploit EPSS 21%

    MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2001-0304 Public exploit

    Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (do…

  • Unscored —
    CVE-2001-0272 Public exploit

    Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read…

  • Unscored —

    PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user i…

  • Unscored —

    Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to r…

  • Unscored —
    CVE-2001-0293 Public exploit

    Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (…

  • Unscored —
    CVE-2001-0253 Public exploit EPSS 11%

    Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2001-0277 Public exploit EPSS 11%

    Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and…

  • Unscored —
    CVE-2001-0286 Public exploit

    Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot …

  • Unscored —
    CVE-2001-0296 Public exploit

    Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.

  • Unscored —

    IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HT…

  • Unscored —
    CVE-2001-0306 Public exploit

    Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary file…

  • Unscored —
    CVE-2001-0255 Public exploit

    FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including…

  • Unscored —

    The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via t…

  • Unscored —

    Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast addre…

  • Unscored —

    FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands…

  • Unscored —

    Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary comm…

  • Unscored —
    CVE-2001-0308 Public exploit

    UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute a…

  • Unscored —

    Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to ex…

  • Unscored —

    pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining th…

  • Unscored —

    Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitra…

  • Unscored —

    SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via …

  • Unscored —
    CVE-2001-0270 Public exploit

    Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management inte…

  • Unscored —

    Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, …

  • Unscored —

    Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when cal…

  • Unscored —

    FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.

  • Unscored —
    CVE-2001-0305 Public exploit

    Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2001-0283 Public exploit

    Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) ch…

  • Unscored —
    CVE-2001-0250 Public exploit

    The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary dire…