Archive
7 May 2001
Vulnerabilities first published on this day (UTC), newest first.
201 results · Feed
-
Unscored —
Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
-
Unscored —
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
-
Unscored —CVE-2001-0013 EPSS 11%
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
-
Unscored —
Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain p…
-
Unscored —CVE-2001-0319 Public exploit
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them …
-
Unscored —CVE-2001-0221 Public exploit
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
-
Unscored —
Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
-
Unscored —
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which c…
-
Unscored —
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
-
Unscored —CVE-2001-0165 Public exploit
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "a…
-
Unscored —CVE-2001-0316 Public exploit
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument …
-
Unscored —
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead …
-
Unscored —
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-0115 Public exploit
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f …
-
Unscored —CVE-2001-0066 Public exploit
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset val…
-
Unscored —
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet p…
-
Unscored —
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the…
-
Unscored —
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" me…
-
Unscored —CVE-2001-0153 EPSS 12%
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attacke…
-
Unscored —
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by…
-
Unscored —
procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap …
-
Unscored —
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack …
-
Unscored —
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L…
-
Unscored —
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial…
-
Unscored —
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
-
Unscored —
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the emai…
-
Unscored —CVE-2001-0259 Public exploit
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generat…
-
Unscored —CVE-2001-0014 EPSS 13%
Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which a…
-
Unscored —
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via …
-
Unscored —CVE-2001-0317 Public exploit
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and…
-
Unscored —
Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command …
-
Unscored —
Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait"…
-
Unscored —CVE-2001-0289 Public exploit
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow l…
-
Unscored —
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify…
-
Unscored —
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to …
-
Unscored —CVE-2001-0110 Public exploit
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmen…
-
Unscored —
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restriction…
-
Unscored —
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a p…
-
Unscored —
NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.