CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1151 CVE-2001-0805 Dir. Trav. 2001-12-06 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.
1152 CVE-2001-0821 2001-12-06 2017-12-19
5.0
 None Remote Low Not required Partial None None
The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.
1153 CVE-2001-0822 DoS 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None None Partial
FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.
1154 CVE-2001-0827 DoS 2001-12-06 2008-09-10
5.0
 None Remote Low Not required None None Partial
Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests.
1155 CVE-2001-0830 DoS 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None None Partial
6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.
1156 CVE-2001-0843 DoS 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None None Partial
Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request.
1157 CVE-2001-0851 Bypass 2001-12-06 2017-10-10
5.0
 None Remote Low Not required Partial None None
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
1158 CVE-2001-0852 DoS 2001-12-06 2018-05-03
5.0
 None Remote Low Not required None None Partial
TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
1159 CVE-2001-0853 Dir. Trav. 2001-12-06 2017-07-11
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
1160 CVE-2001-0854 2001-12-06 2016-10-18
5.0
 None Remote Low Not required None Partial None
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
1161 CVE-2001-0859 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None Partial None
2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions.
1162 CVE-2001-0861 DoS 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None None Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies.
1163 CVE-2001-0863 DoS 2001-12-06 2017-10-10
5.0
 None Remote Low Not required None None Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.
1164 CVE-2001-0868 2001-11-28 2017-12-19
5.0
 None Remote Low Not required Partial None None
Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
1165 CVE-2001-0870 +Info 2001-12-21 2017-12-19
5.0
 None Remote Low Not required Partial None None
HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
1166 CVE-2001-0874 2001-12-13 2021-07-23
5.0
 None Remote Low Not required Partial None None
Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability.
1167 CVE-2001-0877 DoS 2001-12-20 2018-10-12
5.0
 None Remote Low Not required None None Partial
Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.
1168 CVE-2001-0879 DoS 2001-12-20 2019-04-30
5.0
 None Remote Low Not required None None Partial
Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
1169 CVE-2001-0888 DoS 2001-12-21 2017-10-10
5.0
 None Remote Low Not required None None Partial
Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which causes the WAP to deny subsequent SNMP requests.
1170 CVE-2001-0892 668 2001-11-13 2021-09-13
5.0
 None Remote Low Not required Partial None None
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
1171 CVE-2001-0893 668 2001-11-13 2021-09-13
5.0
 None Remote Low Not required Partial None None
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
1172 CVE-2001-0894 DoS 2001-11-11 2017-10-10
5.0
 None Remote Low Not required None None Partial
Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.
1173 CVE-2001-0895 DoS 2001-11-15 2017-10-10
5.0
 None Remote Low Not required None None Partial
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.
1174 CVE-2001-0896 DoS 2001-11-30 2017-10-10
5.0
 None Remote Low Not required None None Partial
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
1175 CVE-2001-0897 XSS 2001-11-15 2016-10-18
5.0
 None Remote Low Not required Partial None None
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
1176 CVE-2001-0898 2001-11-15 2016-10-18
5.0
 None Remote Low Not required Partial None None
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
1177 CVE-2001-0900 Dir. Trav. 2001-11-18 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.
1178 CVE-2001-0904 2001-11-20 2021-07-23
5.0
 None Remote Low Not required Partial None None
Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
1179 CVE-2001-0917 2001-11-22 2019-03-25
5.0
 None Remote Low Not required Partial None None
Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.
1180 CVE-2001-0924 Dir. Trav. 2001-11-22 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
1181 CVE-2001-0925 22 Dir. Trav. 2001-03-12 2021-07-06
5.0
 None Remote Low Not required Partial None None
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
1182 CVE-2001-0926 2001-11-28 2017-12-19
5.0
 None Remote Low Not required Partial None None
SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement.
1183 CVE-2001-0939 DoS 2001-11-30 2017-10-10
5.0
 None Remote Low Not required None None Partial
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
1184 CVE-2001-0945 DoS Overflow 2001-12-03 2016-10-18
5.0
 None Remote Low Not required None None Partial
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
1185 CVE-2001-0951 DoS 2001-12-07 2017-10-10
5.0
 None Remote Low Not required None None Partial
Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
1186 CVE-2001-0952 DoS 2001-12-07 2017-12-19
5.0
 None Remote Low Not required None None Partial
THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.
1187 CVE-2001-0954 DoS 2001-12-07 2017-10-10
5.0
 None Remote Low Not required None None Partial
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
1188 CVE-2001-0965 DoS 2001-08-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
1189 CVE-2001-0971 Dir. Trav. 2001-08-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
1190 CVE-2001-0977 DoS 2001-07-16 2017-10-10
5.0
 None Remote Low Not required None None Partial
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
1191 CVE-2001-0982 Dir. Trav. 2001-07-23 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
1192 CVE-2001-0986 +Info 2001-09-14 2017-12-19
5.0
 None Remote Low Not required Partial None None
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
1193 CVE-2001-0994 DoS 2001-09-04 2017-12-19
5.0
 None Remote Low Not required None None Partial
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device.
1194 CVE-2001-0998 DoS 2001-09-24 2017-10-10
5.0
 None Remote Low Not required None None Partial
IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.
1195 CVE-2001-1004 XSS 2001-08-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.
1196 CVE-2001-1006 2001-08-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
1197 CVE-2001-1007 2001-08-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
1198 CVE-2001-1010 Dir. Trav. 2001-07-22 2017-10-10
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.
1199 CVE-2001-1013 2001-09-12 2017-12-19
5.0
 None Remote Low Not required Partial None None
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
1200 CVE-2001-1018 2001-09-20 2017-12-19
5.0
 None Remote Low Not required Partial None None
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 (This Page)25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.