Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
292 results · Feed
-
Unscored —
Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possib…
-
Unscored —
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attac…
-
Unscored —CVE-2001-0454 Public exploit
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (mo…
-
Unscored —CVE-2001-0490 Public exploit
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
-
Unscored —
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary …
-
Unscored —CVE-2001-0242 EPSS 30%
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands v…
-
Unscored —
fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbit…
-
Unscored —CVE-2001-0380 Public exploit
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access vi…
-
Unscored —CVE-2001-0459 Public exploit
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d o…
-
Unscored —
Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null char…
-
Unscored —CVE-2001-0360 Public exploit
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrar…
-
Unscored —
Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers…
-
Unscored —
Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL …
-
Unscored —
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary…
-
Unscored —
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use …
-
Unscored —
Vulnerability in iPlanet Web Server Enterprise Edition 4.x.
-
Unscored —
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Ca…
-
Unscored —
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern stri…
-
Unscored —
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute a…
-
Unscored —
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which …
-
Unscored —CVE-2001-0466 Public exploit
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot do…
-
Unscored —CVE-2001-0464 Public exploit
Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (…
-
Unscored —
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows …
-
Unscored —
Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupw…
-
Unscored —CVE-2001-0491 Public exploit
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside th…
-
Unscored —CVE-2001-0460 Public exploit
Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of se…
-
Unscored —
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email addre…
-
Unscored —
Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary co…
-
Unscored —CVE-2001-0484 Public exploit
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml …
-
Unscored —
Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the …
-
Unscored —CVE-2001-0452 Public exploit
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *…
-
Unscored —CVE-2001-0425 Public exploit
AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in th…
-
Unscored —CVE-2001-0406 Public exploit
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue q…
-
Unscored —
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via…
-
Unscored —
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle ap…
-
Unscored —CVE-2001-0390 Public exploit
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w…
-
Unscored —
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet,…
-
Unscored —CVE-2001-0369 Public exploit
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long …
-
Unscored —
Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibl…
-
Unscored —
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arb…