Archive
May 2001
Vulnerabilities first published in this month (UTC), newest first.
292 results · Feed
-
Unscored —CVE-2001-0317 Public exploit
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and…
-
Unscored —
Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command …
-
Unscored —
Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait"…
-
Unscored —CVE-2001-0289 Public exploit
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow l…
-
Unscored —
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify…
-
Unscored —
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to …
-
Unscored —CVE-2001-0110 Public exploit
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmen…
-
Unscored —
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restriction…
-
Unscored —
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a p…
-
Unscored —
NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
-
Unscored —CVE-2001-0318 EPSS 11%
Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the …
-
Unscored —CVE-2001-0193 Public exploit
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l…
-
Unscored —
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE el…
-
Unscored —
Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
-
Unscored —
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which …
-
Unscored —CVE-2001-0017 EPSS 17%
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data …
-
Unscored —
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink atta…
-
Unscored —
Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service…
-
Unscored —CVE-2001-0080 Public exploit
Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SS…
-
Unscored —
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
-
Unscored —
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
-
Unscored —CVE-2001-0002 EPSS 20%
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open th…
-
Unscored —
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
-
Unscored —
rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack.
-
Unscored —
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of ser…
-
Unscored —CVE-2001-0034 Public exploit
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user t…
-
Unscored —
The Web interface to Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of servi…
-
Unscored —
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial …
-
Unscored —
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows …
-
Unscored —CVE-2001-0288 Public exploit
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which …
-
Unscored —
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary…
-
Unscored —
phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include f…
-
Unscored —CVE-2001-0274 Public exploit
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell met…
-
Unscored —CVE-2001-0109 Public exploit
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rct…
-
Unscored —CVE-2001-0170 Public exploit
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variab…
-
Unscored —
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arb…
-
Unscored —CVE-2001-0187 Public exploit
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers …
-
Unscored —
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long comma…
-
Unscored —
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.