Skip to content
OpenAdvisories

Archive

May 2001

Vulnerabilities first published in this month (UTC), newest first.

← April 2001 2001 / May June 2001 →
  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7201
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 2491
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

292 results · Feed

  • Unscored —
    CVE-2001-0233 Public exploit EPSS 15%

    Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly exe…

  • Unscored —
    CVE-2001-0111 Public exploit

    Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile co…

  • Unscored —
    CVE-2001-0123 Public exploit

    Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .…

  • Unscored —
    CVE-2001-0119

    getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0096 EPSS 20%

    FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malfor…

  • Unscored —
    CVE-2001-0143

    vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0279 Public exploit

    Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.

  • Unscored —
    CVE-2001-0060

    Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed i…

  • Unscored —
    CVE-2001-0310

    sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does…

  • Unscored —
    CVE-2001-0141

    mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.

  • Unscored —
    CVE-2001-0137 Public exploit EPSS 22%

    Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclos…

  • Unscored —
    CVE-2001-0035

    Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2001-0157

    Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm dev…

  • Unscored —
    CVE-2001-0194

    Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long inp…

  • Unscored —
    CVE-2001-0183 Public exploit

    ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag…

  • Unscored —
    CVE-2001-0105

    Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.

  • Unscored —
    CVE-2001-0039

    IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base…

  • Unscored —
    CVE-2001-0150 Public exploit EPSS 18%

    Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web s…

  • Unscored —
    CVE-2001-0191

    gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COO…

  • Unscored —
    CVE-2001-0152

    The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes passwor…

  • Unscored —
    CVE-2001-0154 EPSS 11%

    HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual …

  • Unscored —
    CVE-2001-0290

    Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.

  • Unscored —
    CVE-2001-0268

    The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is…

  • Unscored —
    CVE-2001-0009 Public exploit

    Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2001-0166

    Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malfor…

  • Unscored —
    CVE-2001-0129 Public exploit EPSS 14%

    Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and poss…

  • Unscored —
    CVE-2001-0116

    gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.

  • Unscored —
    CVE-2001-0005

    Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute ar…

  • Unscored —
    CVE-2001-0072

    gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying…

  • Unscored —
    CVE-2001-0260

    Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute a…

  • Unscored —
    CVE-2001-0196

    inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to…

  • Unscored —
    CVE-2001-0149 Public exploit EPSS 32%

    Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the Get…

  • Unscored —
    CVE-2001-0010 Public exploit EPSS 32%

    Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2001-0142

    squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.

  • Unscored —
    CVE-2001-0053 Public exploit EPSS 18%

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

  • Unscored —
    CVE-2001-0026 Public exploit

    rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet wi…

  • Unscored —
    CVE-2001-0169 Public exploit

    When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded lib…

  • Unscored —
    CVE-2001-0326

    Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote …

  • Unscored —
    CVE-2001-0061

    procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl fil…

  • Unscored —
    CVE-2001-0063

    procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a j…