CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1251 CVE-2001-1133 DoS 2001-08-21 2008-09-05
2.1
None Local Low Not required None None Partial
Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions.
1252 CVE-2001-1134 DoS 2001-08-09 2008-09-10
5.0
None Remote Low Not required None None Partial
Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm.
1253 CVE-2001-1135 2001-08-14 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known.
1254 CVE-2001-1136 DoS 2001-09-13 2017-12-19
2.1
None Local Low Not required None None Partial
The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.
1255 CVE-2001-1137 DoS 2001-09-06 2017-12-19
5.0
None Remote Low Not required None None Partial
D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments.
1256 CVE-2001-1138 Exec Code Dir. Trav. 2001-09-07 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
1257 CVE-2001-1139 Dir. Trav. 2001-08-22 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
1258 CVE-2001-1140 2001-08-22 2017-12-19
5.0
None Remote Low Not required Partial None None
BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
1259 CVE-2001-1141 2001-07-10 2017-10-10
5.0
None Remote Low Not required Partial None None
The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
1260 CVE-2001-1142 +Priv 2001-07-12 2008-09-05
5.0
None Remote Low Not required Partial None None
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
1261 CVE-2001-1143 DoS 2001-07-11 2008-09-05
5.0
None Remote Low Not required None None Partial
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
1262 CVE-2001-1144 Dir. Trav. 2001-07-11 2013-08-17
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
1263 CVE-2001-1145 2001-08-17 2008-09-10
6.2
None Local High Not required Complete Complete Complete
fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories.
1264 CVE-2001-1146 2001-07-11 2017-10-10
1.2
None Local High Not required None Partial None
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
1265 CVE-2001-1147 2001-10-08 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
1266 CVE-2001-1148 Overflow +Priv 2001-06-13 2017-07-11
4.6
None Local Low Not required Partial Partial Partial
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
1267 CVE-2001-1149 DoS 2001-08-21 2008-09-05
5.0
None Remote Low Not required None None Partial
Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.
1268 CVE-2001-1150 2001-08-22 2008-09-05
5.0
None Remote Low Not required Partial None None
Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.
1269 CVE-2001-1151 2001-10-15 2017-12-19
5.0
None Remote Low Not required Partial None None
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
1270 CVE-2001-1152 Bypass 2001-09-05 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
1271 CVE-2001-1153 DoS Exec Code 2001-08-28 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
1272 CVE-2001-1154 DoS 2001-08-30 2017-12-19
5.0
None Remote Low Not required None None Partial
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
1273 CVE-2001-1155 Bypass 2001-08-23 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.
1274 CVE-2001-1156 DoS 2001-10-08 2008-09-05
5.0
None Remote Low Not required None None Partial
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.
1275 CVE-2001-1157 Bypass 2001-08-12 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.
1276 CVE-2001-1158 Bypass 2001-07-09 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
1277 CVE-2001-1159 Exec Code 2001-07-02 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
1278 CVE-2001-1160 Exec Code 2001-06-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.
1279 CVE-2001-1161 XSS 2001-07-02 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.
1280 CVE-2001-1162 Dir. Trav. 2001-06-23 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
1281 CVE-2001-1163 Exec Code Overflow 2001-06-16 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
1282 CVE-2001-1164 Exec Code Overflow 2001-06-27 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
1283 CVE-2001-1166 2001-08-21 2008-09-05
5.0
None Remote Low Not required Partial None None
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.
1284 CVE-2001-1168 Dir. Trav. 2001-08-29 2008-09-10
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
1285 CVE-2001-1169 +Priv 2001-09-02 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
1286 CVE-2001-1170 2001-09-29 2017-12-19
5.0
None Remote Low Not required Partial None None
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
1287 CVE-2001-1172 2001-07-19 2017-10-10
4.6
None Local Low Not required Partial Partial Partial
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
1288 CVE-2001-1173 +Priv 2001-07-26 2008-09-10
7.2
None Local Low Not required Complete Complete Complete
Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
1289 CVE-2001-1176 Exec Code 2001-07-12 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
1290 CVE-2001-1177 2001-07-17 2017-10-10
6.2
None Local High Not required Complete Complete Complete
ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
1291 CVE-2001-1178 Overflow +Priv 2001-07-11 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
1292 CVE-2001-1179 +Priv 2001-07-17 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
1293 CVE-2001-1180 +Priv 2001-07-10 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
1294 CVE-2001-1181 +Priv 2001-07-16 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
1295 CVE-2001-1182 +Priv Bypass 2001-07-17 2017-10-11
7.2
None Local Low Not required Complete Complete Complete
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
1296 CVE-2001-1183 DoS 2001-07-12 2017-10-10
5.0
None Remote Low Not required None None Partial
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
1297 CVE-2001-1184 DoS 2001-12-08 2008-09-05
5.0
None Remote Low Not required None None Partial
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.
1298 CVE-2001-1185 +Priv 2001-12-10 2008-09-05
6.2
None Local High Not required Complete Complete Complete
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
1299 CVE-2001-1186 DoS 2001-12-11 2018-10-30
5.0
None Remote Low Not required None None Partial
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
1300 CVE-2001-1187 Exec Code 2001-12-11 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 (This Page)27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.