Skip to content
OpenAdvisories

Archive

7 May 2001

Vulnerabilities first published on this day (UTC), newest first.

← April 2001 2001 / May /7 June 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7201
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2491
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

201 results · Feed

  • Unscored —
    CVE-2001-0035

    Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2001-0157

    Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm dev…

  • Unscored —
    CVE-2001-0194

    Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long inp…

  • Unscored —
    CVE-2001-0183 Public exploit

    ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag…

  • Unscored —
    CVE-2001-0105

    Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.

  • Unscored —
    CVE-2001-0039

    IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base…

  • Unscored —
    CVE-2001-0150 Public exploit EPSS 18%

    Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web s…

  • Unscored —
    CVE-2001-0191

    gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COO…

  • Unscored —
    CVE-2001-0152

    The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes passwor…

  • Unscored —
    CVE-2001-0154 EPSS 11%

    HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual …

  • Unscored —
    CVE-2001-0290

    Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.

  • Unscored —
    CVE-2001-0268

    The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is…

  • Unscored —
    CVE-2001-0009 Public exploit

    Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2001-0166

    Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malfor…

  • Unscored —
    CVE-2001-0129 Public exploit EPSS 14%

    Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and poss…

  • Unscored —
    CVE-2001-0116

    gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0005

    Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute ar…

  • Unscored —
    CVE-2001-0072

    gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying…

  • Unscored —
    CVE-2001-0260

    Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute a…

  • Unscored —
    CVE-2001-0196

    inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to…

  • Unscored —
    CVE-2001-0149 Public exploit EPSS 32%

    Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the Get…

  • Unscored —
    CVE-2001-0010 Public exploit EPSS 32%

    Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2001-0142

    squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

  • Unscored —
    CVE-2001-0053 Public exploit EPSS 18%

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2001-0026 Public exploit

    rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wi…

  • Unscored —
    CVE-2001-0169 Public exploit

    When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded lib…

  • Unscored —
    CVE-2001-0326

    Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote …

  • Unscored —
    CVE-2001-0061

    procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl fil…

  • Unscored —
    CVE-2001-0063

    procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a j…

  • Unscored —
    CVE-2001-0179

    Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF…

  • Unscored —
    CVE-2001-0117

    sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.

  • Unscored —
    CVE-2001-0126

    Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL …

  • Unscored —
    CVE-2001-0090

    The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the us…

  • Unscored —
    CVE-2001-0008 Public exploit EPSS 13%

    Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedu…

  • Unscored —
    CVE-2001-0147

    Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed fie…

  • Unscored —
    CVE-2001-0057

    Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP e…

  • Unscored —
    CVE-2001-0144 Public exploit EPSS 32%

    CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH serve…

  • Unscored —
    CVE-2001-0130

    Buffer overflow in HTML parser of the Lotus R5 Domino Server before 5.06, and Domino Client before 5.05, allows remote …

  • Unscored —
    CVE-2001-0055

    CBOS 2.4.1 and earlier in Cisco 600 routers allows remote attackers to cause a denial of service via a slow stream of T…

  • Unscored —
    CVE-2001-0003

    Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Exp…