Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
292 results · Feed
-
Unscored —CVE-2001-0263 Public exploit
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via th…
-
Unscored —CVE-2001-0468 Public exploit
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
-
Unscored —
IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for …
-
Unscored —
Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access inter…
-
Unscored —CVE-2001-0476 Public exploit
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute …
-
Unscored —
Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a …
-
Unscored —
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling t…
-
Unscored —
The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obt…
-
Unscored —
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary…
-
Unscored —
Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possi…
-
Unscored —
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server …
-
Unscored —
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
-
Unscored —CVE-2001-0418 Public exploit
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content da…
-
Unscored —
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute…
-
Unscored —CVE-2001-0264 Public exploit
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting inf…
-
Unscored —CVE-2001-0248 EPSS 11%
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathn…
-
Unscored —
The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4)…
-
Unscored —
Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary fil…
-
Unscored —
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting …
-
Unscored —CVE-2001-0249 EPSS 20%
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathn…
-
Unscored —
INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_…
-
Unscored —
Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
-
Unscored —CVE-2001-0471 Public exploit
SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow r…
-
Unscored —
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd w…
-
Unscored —CVE-2001-0401 Public exploit
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME enviro…
-
Unscored —
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local u…
-
Unscored —
REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows loc…
-
Unscored —
Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the Abo…
-
Unscored —
Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote atta…
-
Unscored —
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (m…
-
Unscored —
TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform…
-
Unscored —
dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to th…
-
Unscored —
Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a de…
-
Unscored —
TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports whi…
-
Unscored —
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP …
-
Unscored —CVE-2001-0426 Public exploit
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges vi…
-
Unscored —CVE-2001-0403 Public exploit
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File op…
-
Unscored —
Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —CVE-2001-0329 Public exploit
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then…
-
Unscored —CVE-2001-0384 Public exploit
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.