CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
801 CVE-2001-0739 +Priv 2001-10-18 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.
802 CVE-2001-0738 DoS 2001-10-18 2017-10-10
5.0
None Remote Low Not required None None Partial
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.
803 CVE-2001-0737 2001-10-18 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.
804 CVE-2001-0736 2001-10-18 2017-12-19
2.1
None Local Low Not required None Partial None
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
805 CVE-2001-0735 Exec Code Overflow 2001-10-18 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
806 CVE-2001-0734 +Priv 2001-10-18 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.
807 CVE-2001-0733 Exec Code 2001-10-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
808 CVE-2001-0731 Bypass 2001-10-01 2021-06-06
5.0
None Remote Low Not required Partial None None
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.
809 CVE-2001-0730 2001-10-30 2021-06-06
5.0
None Remote Low Not required None Partial None
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
810 CVE-2001-0729 Bypass 2001-10-30 2021-06-06
5.0
None Remote Low Not required None None Partial
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.
811 CVE-2001-0728 Overflow +Priv 2001-10-30 2017-10-10
4.6
None Local Low Not required Partial Partial Partial
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.
812 CVE-2001-0727 Exec Code 2001-12-14 2021-07-23
7.5
None Remote Low Not required Partial Partial Partial
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."
813 CVE-2001-0726 2001-12-06 2020-04-09
7.5
None Remote Low Not required Partial Partial Partial
Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.
814 CVE-2001-0724 Bypass 2001-11-14 2021-07-23
7.5
None Remote Low Not required Partial Partial Partial
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.
815 CVE-2001-0723 2001-11-14 2021-07-23
6.4
None Remote Low Not required Partial Partial None
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."
816 CVE-2001-0722 2001-12-06 2021-07-23
6.4
None Remote Low Not required Partial Partial None
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."
817 CVE-2001-0721 DoS 2001-12-06 2018-10-12
5.0
None Remote Low Not required None None Partial
Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.
818 CVE-2001-0720 Exec Code 2001-12-06 2018-10-12
7.5
None Remote Low Not required Partial Partial Partial
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.
819 CVE-2001-0719 Exec Code Overflow 2001-12-06 2018-10-12
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
820 CVE-2001-0718 Exec Code Bypass 2001-10-30 2018-10-12
7.5
None Remote Low Not required Partial Partial Partial
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
821 CVE-2001-0717 Exec Code 2001-10-30 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.
822 CVE-2001-0716 DoS 2001-12-06 2017-10-10
5.0
None Remote Low Not required None None Partial
Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server.
823 CVE-2001-0715 +Info 2001-10-30 2011-03-08
2.1
None Local Low Not required Partial None None
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode.
824 CVE-2001-0714 DoS 2001-10-30 2008-09-05
2.1
None Local Low Not required None None Partial
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option.
825 CVE-2001-0713 +Priv 2001-10-30 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
826 CVE-2001-0712 2001-10-30 2021-07-23
7.5
None Remote Low Not required Partial Partial Partial
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.
827 CVE-2001-0711 DoS 2001-08-31 2017-12-19
5.0
None Remote Low Not required None None Partial
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string.
828 CVE-2001-0710 DoS 2001-09-20 2017-10-10
5.0
None Remote Low Not required None None Partial
NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.
829 CVE-2001-0709 2001-09-20 2017-12-19
5.0
None Remote Low Not required Partial None None
Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode.
830 CVE-2001-0708 DoS 2001-09-20 2017-12-19
5.0
None Remote Low Not required None None Partial
Denicomp REXECD 1.05 and earlier allows a remote attacker to cause a denial of service (crash) via a long string.
831 CVE-2001-0707 DoS 2001-09-20 2017-12-19
5.0
None Remote Low Not required None None Partial
Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.
832 CVE-2001-0706 DoS 2001-09-20 2017-10-10
2.1
None Local Low Not required None None Partial
Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders.
833 CVE-2001-0705 Dir. Trav. 2001-09-20 2017-12-19
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with "dot dot" sequences in the template argument.
834 CVE-2001-0704 2001-09-20 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a file that does not exist.
835 CVE-2001-0703 DoS 2001-09-20 2017-12-19
5.0
None Remote Low Not required None None Partial
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter.
836 CVE-2001-0702 DoS Exec Code 2001-09-20 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.
837 CVE-2001-0701 Overflow +Priv 2001-09-20 2018-05-03
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.
838 CVE-2001-0700 Exec Code Overflow 2001-09-20 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.
839 CVE-2001-0699 Exec Code Overflow 2001-09-20 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.
840 CVE-2001-0698 Dir. Trav. 2001-09-20 2017-10-10
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.
841 CVE-2001-0697 DoS 2001-09-20 2017-10-10
5.0
None Remote Low Not required None None Partial
NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.
842 CVE-2001-0696 DoS 2001-09-20 2017-10-10
5.0
None Remote Low Not required None None Partial
NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.
843 CVE-2001-0695 DoS 2001-09-20 2017-12-19
5.0
None Remote Low Not required None None Partial
WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive (A:\).
844 CVE-2001-0694 Dir. Trav. 2001-09-20 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command.
845 CVE-2001-0693 2001-09-20 2017-12-19
5.0
None Remote Low Not required Partial None None
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).
846 CVE-2001-0692 Bypass 2001-09-20 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.
847 CVE-2001-0691 Exec Code Overflow 2001-09-20 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations.
848 CVE-2001-0690 Exec Code 2001-09-20 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.
849 CVE-2001-0689 2001-09-20 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.
850 CVE-2001-0688 DoS 2001-09-20 2008-09-05
5.0
None Remote Low Not required None None Partial
Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD ("CD . .") command.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 (This Page)18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.