CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
651 CVE-2001-0124 Overflow +Priv 2001-03-12 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
652 CVE-2001-0128 +Priv Bypass 2001-03-12 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
653 CVE-2001-0165 Overflow +Priv 2001-05-03 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
654 CVE-2001-0172 DoS Exec Code Overflow 2001-03-26 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
655 CVE-2001-0176 Exec Code +Priv 2001-03-26 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
656 CVE-2001-0190 Overflow +Priv 2001-03-26 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
657 CVE-2001-0193 +Priv 2001-05-03 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
658 CVE-2001-0220 Overflow +Priv 2001-06-02 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
659 CVE-2001-0221 Overflow +Priv 2001-06-02 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
660 CVE-2001-0229 +Priv 2001-05-03 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
661 CVE-2001-0266 +Priv 2001-05-03 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
662 CVE-2001-0267 +Priv 2001-05-03 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
663 CVE-2001-0268 +Priv 2001-05-03 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
664 CVE-2001-0279 Overflow +Priv 2001-05-03 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
665 CVE-2001-0281 +Priv 2001-05-03 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.
666 CVE-2001-0344 +Priv 2001-07-21 2018-10-12
7.2
 None Local Low Not required Complete Complete Complete
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
667 CVE-2001-0349 Exec Code 2001-07-21 2018-10-12
7.2
 None Local Low Not required Complete Complete Complete
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
668 CVE-2001-0366 2001-06-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program.
669 CVE-2001-0369 Overflow 2001-06-27 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
670 CVE-2001-0387 +Priv 2001-07-02 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
671 CVE-2001-0401 Exec Code Overflow 2001-06-18 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
672 CVE-2001-0403 2001-06-18 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
673 CVE-2001-0412 +Priv 2001-06-18 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode.
674 CVE-2001-0422 Exec Code Overflow 2001-07-02 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
675 CVE-2001-0423 Exec Code Overflow 2001-07-02 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093.
676 CVE-2001-0424 Exec Code 2001-07-02 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
677 CVE-2001-0426 Overflow +Priv 2001-07-02 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
678 CVE-2001-0459 Overflow +Priv 2001-06-27 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option.
679 CVE-2001-0468 Overflow +Priv 2001-06-27 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in FTPFS allows local users to gain root privileges via a long user name.
680 CVE-2001-0470 Overflow +Priv 2001-06-27 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name.
681 CVE-2001-0481 2001-06-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
682 CVE-2001-0482 DoS Exec Code Bypass 2001-06-18 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.
683 CVE-2001-0485 Exec Code 2001-06-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
684 CVE-2001-0506 Overflow +Priv 2001-09-20 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
685 CVE-2001-0507 +Priv 2001-09-20 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
686 CVE-2001-0525 Overflow +Priv 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument.
687 CVE-2001-0528 +Priv 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.
688 CVE-2001-0529 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
689 CVE-2001-0533 Overflow +Priv 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
690 CVE-2001-0551 Exec Code Overflow 2001-05-22 2018-05-03
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.
691 CVE-2001-0553 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
692 CVE-2001-0556 2001-08-22 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
693 CVE-2001-0559 +Priv 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
694 CVE-2001-0570 +Priv 2001-08-14 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.
695 CVE-2001-0577 Overflow +Priv 2001-08-22 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
696 CVE-2001-0587 Overflow +Priv 2001-08-22 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
697 CVE-2001-0597 2001-08-02 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.
698 CVE-2001-0625 2001-08-22 2021-04-09
7.2
 None Local Low Not required Complete Complete Complete
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .
699 CVE-2001-0628 2001-08-14 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
700 CVE-2001-0634 DoS +Priv 2001-08-22 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 (This Page)15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.