CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In June 2001 (CVSS score >= 3)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2001-1459 Exec Code Bypass 2001-06-19 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
2 CVE-2001-1430 2001-06-11 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.
3 CVE-2001-1368 2001-06-11 2017-12-19
5.0
 None Remote Low Not required None Partial None
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.
4 CVE-2001-1359 2001-06-08 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
5 CVE-2001-1345 +Priv 2001-06-05 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
6 CVE-2001-1344 Bypass 2001-06-12 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).
7 CVE-2001-1343 Exec Code 2001-06-12 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
8 CVE-2001-1330 Overflow +Priv 2001-06-11 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
9 CVE-2001-1329 Overflow +Priv 2001-06-11 2017-04-29
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
10 CVE-2001-1328 Exec Code Overflow 2001-06-22 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
11 CVE-2001-1324 +Priv 2001-06-26 2008-09-10
4.6
 None Local Low Not required Partial Partial Partial
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
12 CVE-2001-1290 Exec Code +Priv 2001-06-28 2017-12-19
5.0
 None Remote Low Not required None Partial None
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
13 CVE-2001-1263 DoS Overflow 2001-06-06 2017-12-19
5.0
 None Remote Low Not required None None Partial
telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.
14 CVE-2001-1251 DoS 2001-06-29 2008-09-10
5.0
 None Remote Low Not required None None Partial
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
15 CVE-2001-1250 DoS Overflow 2001-06-29 2008-09-10
5.0
 None Remote Low Not required None None Partial
vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.
16 CVE-2001-1249 DoS 2001-06-29 2008-09-10
5.0
 None Remote Low Not required None None Partial
vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
17 CVE-2001-1248 2001-06-29 2008-09-10
5.0
 None Remote Low Not required Partial None None
vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).
18 CVE-2001-1246 Exec Code 2001-06-30 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.
19 CVE-2001-1239 DoS 2001-06-29 2008-09-10
5.0
 None Remote Low Not required None None Partial
PowerNet IX allows remote attackers to cause a denial of service via a port scan.
20 CVE-2001-1164 Exec Code Overflow 2001-06-27 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
21 CVE-2001-1163 Exec Code Overflow 2001-06-16 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
22 CVE-2001-1162 Dir. Trav. 2001-06-23 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
23 CVE-2001-1160 Exec Code 2001-06-18 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
24 CVE-2001-1148 Overflow +Priv 2001-06-13 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
25 CVE-2001-1088 2001-06-05 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
26 CVE-2001-1083 DoS 2001-06-26 2017-10-10
5.0
 None Remote Low Not required None None Partial
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
27 CVE-2001-1080 +Priv 2001-06-19 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
28 CVE-2001-1078 Exec Code +Priv 2001-06-21 2017-12-19
10.0
 None Remote Low Not required Complete Complete Complete
Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
29 CVE-2001-1077 Overflow +Priv 2001-06-15 2017-12-19
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
30 CVE-2001-1046 Overflow +Priv 2001-06-02 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.
31 CVE-2001-0906 +Priv 2001-06-22 2017-10-10
6.2
 None Local High Not required Complete Complete Complete
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.
32 CVE-2001-0496 +Priv 2001-06-27 2017-12-19
4.6
 None Local Low Not required Partial Partial Partial
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.
33 CVE-2001-0495 Dir. Trav. 2001-06-27 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.
34 CVE-2001-0494 Exec Code Overflow 2001-06-27 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header.
35 CVE-2001-0493 DoS 2001-06-27 2017-10-10
5.0
 None Remote Low Not required None None Partial
Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.
36 CVE-2001-0492 2001-06-27 2017-12-19
5.0
 None Remote Low Not required Partial None None
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.
37 CVE-2001-0491 Dir. Trav. 2001-06-27 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.
38 CVE-2001-0490 Exec Code Overflow 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
39 CVE-2001-0489 Exec Code 2001-06-27 2018-05-03
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
40 CVE-2001-0487 DoS 2001-06-27 2008-09-10
5.0
 None Remote Low Not required None None Partial
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
41 CVE-2001-0485 Exec Code 2001-06-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
42 CVE-2001-0484 DoS 2001-06-27 2017-12-19
6.4
 None Remote Low Not required None Partial Partial
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.
43 CVE-2001-0483 2001-06-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
44 CVE-2001-0482 DoS Exec Code Bypass 2001-06-18 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.
45 CVE-2001-0481 2001-06-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
46 CVE-2001-0480 Dir. Trav. 2001-06-27 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands.
47 CVE-2001-0479 Exec Code Dir. Trav. 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
48 CVE-2001-0478 Exec Code Dir. Trav. 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
49 CVE-2001-0477 Exec Code 2001-06-27 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerability in WebCalendar 0.9.26 allows remote command execution.
50 CVE-2001-0476 Exec Code Overflow 2001-06-27 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
Total number of vulnerabilities : 195   Page : 1 (This Page)2 3 4
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.