CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
751 CVE-2001-1180 +Priv 2001-07-10 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
752 CVE-2001-1181 +Priv 2001-07-16 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
753 CVE-2001-1182 +Priv Bypass 2001-07-17 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
754 CVE-2001-1198 +Priv 2001-12-15 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
755 CVE-2001-1200 Bypass 2001-12-17 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.
756 CVE-2001-1201 Exec Code Overflow 2001-12-17 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.
757 CVE-2001-1203 +Priv 2001-12-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
758 CVE-2001-1275 +Priv 2001-01-19 2019-10-07
7.2
 None Local Low Not required Complete Complete Complete
MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.
759 CVE-2001-1329 Overflow +Priv 2001-06-11 2017-04-29
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
760 CVE-2001-1330 Overflow +Priv 2001-06-11 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
761 CVE-2001-1358 +Priv 2001-02-07 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.
762 CVE-2001-1360 2001-07-19 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.
763 CVE-2001-1374 +Priv 2001-07-19 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
764 CVE-2001-1384 +Priv 2001-10-18 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
765 CVE-2001-1447 +Priv 2001-10-17 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications to run with root privileges.
766 CVE-2001-1478 Exec Code Overflow 2001-12-31 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
767 CVE-2001-1498 Exec Code Overflow 2001-12-31 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
768 CVE-2001-1541 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
769 CVE-2001-1561 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
770 CVE-2001-1562 +Priv 2001-12-31 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.
771 CVE-2001-1582 119 Exec Code Overflow 2001-12-31 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
772 CVE-2001-0427 20 DoS 2001-06-18 2017-10-10
7.1
 None Remote Medium Not required None None Complete
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
773 CVE-2001-1441 XSS 2001-07-02 2017-07-11
6.8
 None Remote Medium Not required Partial Partial Partial
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.
774 CVE-2001-1585 287 Bypass 2001-12-31 2017-07-29
6.8
 None Remote Medium Not required Partial Partial Partial
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.
775 CVE-2000-1132 2001-01-09 2017-10-10
6.4
 None Remote Low Not required Partial None Partial
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable.
776 CVE-2001-0276 2001-05-03 2017-10-10
6.4
 None Remote Low Not required Partial None Partial
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
777 CVE-2001-0283 Dir. Trav. 2001-05-03 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.
778 CVE-2001-0323 DoS 2001-06-02 2017-12-19
6.4
 None Remote Low Not required None Partial Partial
The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment (DF) set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host.
779 CVE-2001-0380 2001-06-18 2017-10-19
6.4
 None Remote Low Not required Partial Partial None
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.
780 CVE-2001-0421 2001-07-02 2018-10-30
6.4
 None Remote Low Not required Partial None Partial
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
781 CVE-2001-0434 DoS 2001-07-02 2017-10-10
6.4
 None Remote Low Not required None Partial Partial
The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service.
782 CVE-2001-0450 Dir. Trav. 2001-06-27 2017-12-19
6.4
 None Remote Low Not required Partial Partial None
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.
783 CVE-2001-0484 DoS 2001-06-27 2017-12-19
6.4
 None Remote Low Not required None Partial Partial
Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.
784 CVE-2001-0722 2001-12-06 2021-07-23
6.4
 None Remote Low Not required Partial Partial None
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."
785 CVE-2001-0723 2001-11-14 2021-07-23
6.4
 None Remote Low Not required Partial Partial None
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."
786 CVE-2001-0834 DoS 2001-12-06 2017-10-10
6.4
 None Remote Low Not required Partial None Partial
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.
787 CVE-2001-0938 Dir. Trav. 2001-11-30 2016-10-18
6.4
 None Remote Low Not required Partial Partial None
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
788 CVE-2001-0959 +Info 2001-09-15 2021-04-07
6.4
 None Remote Low Not required Partial Partial None
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
789 CVE-2001-0973 2001-08-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.
790 CVE-2001-0996 2001-09-02 2017-12-19
6.4
 None Remote Low Not required None Partial Partial
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
791 CVE-2001-1040 2001-08-31 2008-09-05
6.4
 None Remote Low Not required Partial None Partial
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
792 CVE-2001-1101 2001-09-08 2017-12-19
6.4
 None Remote Low Not required None Partial Partial
The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
793 CVE-2001-1120 2001-07-11 2017-12-19
6.4
 None Remote Low Not required Partial Partial None
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
794 CVE-2001-1210 2001-12-30 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
795 CVE-2001-1213 2001-12-18 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
796 CVE-2001-1247 264 2001-12-06 2012-06-25
6.4
 None Remote Low Not required Partial Partial None
PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.
797 CVE-2001-1512 2001-12-31 2008-09-10
6.4
 None Remote Low Not required Partial Partial None
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050.
798 CVE-2001-1568 2001-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
799 CVE-2001-1569 2001-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
800 CVE-1999-0718 +Priv 2001-03-12 2017-10-10
6.2
 None Local High Not required Complete Complete Complete
IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 (This Page)17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.