Skip to content
OpenAdvisories

Archive

October 2001

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 2 
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 7 
  8. 8 
  9. 9 
  10. 10 
  11. 11 
  12. 1245
  13. 13 
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 18 
  19. 19 
  20. 20 
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 26 
  27. 27 
  28. 28 
  29. 29 
  30. 30 
  31. 31 

45 results · Feed

  • Unscored —

    Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a den…

  • Unscored —

    Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary co…

  • Unscored —

    The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the s…

  • Unscored —

    Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through …

  • Unscored —
    CVE-2001-0669 Public exploit

    Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 600…

  • Unscored —

    Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.…

  • Unscored —

    Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the lo…

  • Unscored —

    Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configura…

  • Unscored —

    Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive…

  • Unscored —

    GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain …

  • Unscored —

    Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files,…

  • Unscored —
    CVE-2001-0791 Public exploit

    Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly callin…

  • Unscored —
    CVE-2001-0780 Public exploit

    Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sens…

  • Unscored —

    Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HE…

  • Unscored —
    CVE-2001-0743 Public exploit

    Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with…

  • Unscored —

    Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of reque…

  • Unscored —

    Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly…

  • Unscored —

    Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (d…

  • Unscored —
    CVE-2001-0736 Public exploit

    Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to ov…

  • Unscored —

    A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections vi…

  • Unscored —

    Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.

  • Unscored —

    Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 al…

  • Unscored —
    CVE-2001-0759 Public exploit

    Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file…

  • Unscored —
    CVE-2001-0778 Public exploit

    OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol …

  • Unscored —
    CVE-2001-0746 Public exploit EPSS 15%

    Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to ca…

  • Unscored —
    CVE-2001-0758 Public exploit

    Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ...…

  • Unscored —

    Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass"…

  • Unscored —

    Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long user…

  • Unscored —

    Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Registe…

  • Unscored —
    CVE-2001-0505 EPSS 33%

    Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory ex…

  • Unscored —

    Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan,…

  • Unscored —

    Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers …

  • Unscored —
    CVE-2001-0735 Public exploit

    Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute …

  • Unscored —

    Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER comm…

  • Unscored —
    CVE-2001-0782 Public exploit

    KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user config…

  • Unscored —
    CVE-2001-0775 Public exploit EPSS 16%

    Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code vi…

  • Unscored —

    Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the comma…

  • Unscored —

    Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents v…

  • Unscored —

    Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS con…

  • Unscored —

    CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary…