Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
292 results · Feed
-
Unscored —
Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a ..…
-
Unscored —
The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to c…
-
Unscored —
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
-
Unscored —
Vulnerability in WebCalendar 0.9.26 allows remote command execution.
-
Unscored —CVE-2001-0262 Public exploit
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary comman…
-
Unscored —
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, whic…
-
Unscored —CVE-2001-0399 Public exploit
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp befor…
-
Unscored —
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows …
-
Unscored —
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 …
-
Unscored —CVE-2001-0385 Public exploit
GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
-
Unscored —CVE-2001-0421 Public exploit
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possi…
-
Unscored —
Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
-
Unscored —
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
-
Unscored —CVE-2001-0013 EPSS 11%
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
-
Unscored —
Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain p…
-
Unscored —CVE-2001-0319 Public exploit
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them …
-
Unscored —CVE-2001-0221 Public exploit
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
-
Unscored —
Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
-
Unscored —
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which c…
-
Unscored —
arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
-
Unscored —CVE-2001-0165 Public exploit
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "a…
-
Unscored —CVE-2001-0316 Public exploit
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument …
-
Unscored —
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead …
-
Unscored —
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2001-0115 Public exploit
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f …
-
Unscored —CVE-2001-0066 Public exploit
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset val…
-
Unscored —
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet p…
-
Unscored —
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the…
-
Unscored —
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" me…
-
Unscored —CVE-2001-0153 EPSS 12%
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attacke…
-
Unscored —
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by…
-
Unscored —
procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap …
-
Unscored —
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack …
-
Unscored —
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L…
-
Unscored —
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial…
-
Unscored —
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
-
Unscored —
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the emai…
-
Unscored —CVE-2001-0259 Public exploit
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generat…
-
Unscored —CVE-2001-0014 EPSS 13%
Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which a…
-
Unscored —
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via …