Skip to content
OpenAdvisories

Archive

7 May 2001

Vulnerabilities first published on this day (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7201
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2491
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

201 results · Feed

  • Unscored —
    CVE-2001-0318 EPSS 11%

    Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the …

  • Unscored —
    CVE-2001-0193 Public exploit

    Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l…

  • Unscored —
    CVE-2001-0089 Public exploit EPSS 14%

    Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE el…

  • Unscored —

    Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.

  • Unscored —

    inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which …

  • Unscored —
    CVE-2001-0017 EPSS 17%

    Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data …

  • Unscored —

    dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink atta…

  • Unscored —
    CVE-2001-0041 Public exploit EPSS 12%

    Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2001-0080 Public exploit

    Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SS…

  • Unscored —
    CVE-2001-0151 Public exploit EPSS 68%

    IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.

  • Unscored —

    useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0002 EPSS 20%

    Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open th…

  • Unscored —

    Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

  • Unscored —

    rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —

    Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of ser…

  • Unscored —
    CVE-2001-0034 Public exploit

    KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user t…

  • Unscored —

    The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of servi…

  • Unscored —

    Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial …

  • Unscored —

    The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows …

  • Unscored —
    CVE-2001-0288 Public exploit

    Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which …

  • Unscored —

    exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary…

  • Unscored —

    phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include f…

  • Unscored —
    CVE-2001-0274 Public exploit

    kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell met…

  • Unscored —
    CVE-2001-0109 Public exploit

    rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rct…

  • Unscored —
    CVE-2001-0170 Public exploit

    glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variab…

  • Unscored —
    CVE-2001-0054 Public exploit EPSS 12%

    Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arb…

  • Unscored —
    CVE-2001-0187 Public exploit

    Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers …

  • Unscored —

    Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long comma…

  • Unscored —

    KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.

  • Unscored —
    CVE-2001-0233 Public exploit EPSS 15%

    Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly exe…

  • Unscored —
    CVE-2001-0111 Public exploit

    Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile co…

  • Unscored —
    CVE-2001-0123 Public exploit

    Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .…

  • Unscored —

    getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0096 EPSS 20%

    FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malfor…

  • Unscored —

    vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0279 Public exploit

    Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

  • Unscored —

    Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed i…

  • Unscored —

    sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does…

  • Unscored —

    mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

  • Unscored —
    CVE-2001-0137 Public exploit EPSS 22%

    Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclos…