Skip to content
OpenAdvisories

Archive

July 2001

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 12 
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 2761
  28. 28 
  29. 29 
  30. 30 
  31. 31 

61 results · Feed

  • Unscored —
    CVE-2001-0623 Public exploit

    sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop p…

  • Unscored —

    Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing cert…

  • Unscored —

    Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 1…

  • Unscored —
    CVE-2001-0584 Public exploit

    IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SE…

  • Unscored —
    CVE-2001-0610 Public exploit

    kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm c…

  • Unscored —

    The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink atta…

  • Unscored —

    HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker …

  • Unscored —

    Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, whi…

  • Unscored —

    Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a rem…

  • Unscored —

    The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can al…

  • Unscored —
    CVE-2001-0580 Public exploit

    Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting …

  • Unscored —

    FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipi…

  • Unscored —

    asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain ad…

  • Unscored —

    Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) O…

  • Unscored —
    CVE-2001-0579 Public exploit

    lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack i…

  • Unscored —

    Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) …

  • Unscored —

    Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with th…

  • Unscored —

    Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection pa…

  • Unscored —

    Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large str…

  • Unscored —

    Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers…

  • Unscored —

    Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired …

  • Unscored —

    Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause …

  • Unscored —
    CVE-2001-0520 Public exploit

    Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embed…

  • Unscored —

    Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabili…

  • Unscored —
    CVE-2001-0614 Public exploit

    Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary comma…

  • Unscored —

    deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a …

  • Unscored —

    Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS…

  • Unscored —

    Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a m…

  • Unscored —

    Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests …

  • Unscored —

    iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDA…

  • Unscored —
    CVE-2001-0555 Public exploit EPSS 15%

    ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot do…

  • Unscored —
    CVE-2001-0597 Public exploit

    Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to…

  • Unscored —
    CVE-2001-0521 Public exploit

    Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNI…

  • Unscored —
    CVE-2001-0581 Public exploit

    Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of con…

  • Unscored —

    Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed c…

  • Unscored —
    CVE-2001-0566 Public exploit

    Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to por…

  • Unscored —

    QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e…

  • Unscored —

    The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have ac…

  • Unscored —

    Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts…

  • Unscored —
    CVE-2001-0575 Public exploit

    Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long f…