Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
107 results · Clear filters · Feed
-
Unscored —CVE-2001-0263 Public exploit
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via th…
-
Unscored —CVE-2001-0468 Public exploit
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
-
Unscored —CVE-2001-0476 Public exploit
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute …
-
Unscored —CVE-2001-0418 Public exploit
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content da…
-
Unscored —CVE-2001-0264 Public exploit
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting inf…
-
Unscored —CVE-2001-0471 Public exploit
SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow r…
-
Unscored —CVE-2001-0401 Public exploit
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME enviro…
-
Unscored —
TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform…
-
Unscored —CVE-2001-0426 Public exploit
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges vi…
-
Unscored —CVE-2001-0403 Public exploit
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File op…
-
Unscored —CVE-2001-0329 Public exploit
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then…
-
Unscored —CVE-2001-0384 Public exploit
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
-
Unscored —CVE-2001-0454 Public exploit
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mo…
-
Unscored —CVE-2001-0490 Public exploit
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
-
Unscored —CVE-2001-0380 Public exploit
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access vi…
-
Unscored —CVE-2001-0459 Public exploit
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d o…
-
Unscored —CVE-2001-0360 Public exploit
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrar…
-
Unscored —
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern stri…
-
Unscored —CVE-2001-0466 Public exploit
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2001-0464 Public exploit
Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (…
-
Unscored —CVE-2001-0491 Public exploit
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside th…
-
Unscored —CVE-2001-0460 Public exploit
Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of se…
-
Unscored —
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addre…
-
Unscored —CVE-2001-0484 Public exploit
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml …
-
Unscored —CVE-2001-0452 Public exploit
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *…
-
Unscored —CVE-2001-0425 Public exploit
AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in th…
-
Unscored —CVE-2001-0406 Public exploit
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue q…
-
Unscored —
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle ap…
-
Unscored —CVE-2001-0390 Public exploit
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w…
-
Unscored —CVE-2001-0369 Public exploit
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long …
-
Unscored —CVE-2001-0262 Public exploit
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary comman…
-
Unscored —CVE-2001-0399 Public exploit
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp befor…
-
Unscored —
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 …
-
Unscored —CVE-2001-0385 Public exploit
GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
-
Unscored —CVE-2001-0421 Public exploit
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possi…
-
Unscored —CVE-2001-0319 Public exploit
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them …
-
Unscored —CVE-2001-0221 Public exploit
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
-
Unscored —CVE-2001-0165 Public exploit
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "a…
-
Unscored —CVE-2001-0316 Public exploit
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument …
-
Unscored —
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitr…