Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
107 results · Clear filters · Feed
-
Unscored —CVE-2001-0115 Public exploit
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f …
-
Unscored —CVE-2001-0066 Public exploit
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset val…
-
Unscored —
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack …
-
Unscored —
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the emai…
-
Unscored —CVE-2001-0259 Public exploit
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generat…
-
Unscored —
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via …
-
Unscored —CVE-2001-0317 Public exploit
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and…
-
Unscored —CVE-2001-0289 Public exploit
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow l…
-
Unscored —CVE-2001-0110 Public exploit
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmen…
-
Unscored —CVE-2001-0193 Public exploit
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l…
-
Unscored —
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE el…
-
Unscored —
Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service…
-
Unscored —CVE-2001-0080 Public exploit
Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SS…
-
Unscored —
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
-
Unscored —CVE-2001-0034 Public exploit
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user t…
-
Unscored —CVE-2001-0288 Public exploit
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which …
-
Unscored —CVE-2001-0274 Public exploit
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell met…
-
Unscored —CVE-2001-0109 Public exploit
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rct…
-
Unscored —CVE-2001-0170 Public exploit
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variab…
-
Unscored —
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arb…
-
Unscored —CVE-2001-0187 Public exploit
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers …
-
Unscored —
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly exe…
-
Unscored —CVE-2001-0111 Public exploit
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile co…
-
Unscored —CVE-2001-0123 Public exploit
Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .…
-
Unscored —CVE-2001-0279 Public exploit
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
-
Unscored —
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclos…
-
Unscored —CVE-2001-0183 Public exploit
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag…
-
Unscored —
Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web s…
-
Unscored —CVE-2001-0009 Public exploit
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via …
-
Unscored —
Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and poss…
-
Unscored —
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the Get…
-
Unscored —
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
-
Unscored —
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
-
Unscored —CVE-2001-0026 Public exploit
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wi…
-
Unscored —CVE-2001-0169 Public exploit
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded lib…
-
Unscored —
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedu…
-
Unscored —
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH serve…
-
Unscored —
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the em…
-
Unscored —CVE-2001-0295 Public exploit
Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly re…
-
Unscored —
Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrar…