CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1301 CVE-2001-0211 Dir. Trav. 2001-06-02 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
1302 CVE-2001-0210 Dir. Trav. 2001-06-02 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.
1303 CVE-2001-0209 DoS Exec Code Overflow 2001-03-26 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long description.
1304 CVE-2001-0208 +Priv 2001-06-02 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
1305 CVE-2001-0207 Exec Code Overflow 2001-03-26 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.
1306 CVE-2001-0206 Dir. Trav. 2001-06-02 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
1307 CVE-2001-0205 Dir. Trav. 2001-05-03 2016-10-18
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
1308 CVE-2001-0204 DoS 2001-06-02 2017-10-10
5.0
None Remote Low Not required None None Partial
Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.
1309 CVE-2001-0203 +Priv 2001-03-26 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.
1310 CVE-2001-0202 2001-05-03 2008-09-05
5.0
None Remote Low Not required Partial None None
Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
1311 CVE-2001-0201 2001-03-26 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
1312 CVE-2001-0200 2001-05-03 2008-09-05
5.0
None Remote Low Not required Partial None None
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
1313 CVE-2001-0199 Dir. Trav. 2001-05-03 2017-07-11
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
1314 CVE-2001-0198 1 Exec Code Overflow 2001-05-03 2017-12-19
7.6
None Remote High Not required Complete Complete Complete
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
1315 CVE-2001-0197 Exec Code 2001-03-26 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
1316 CVE-2001-0196 2001-05-03 2017-10-10
5.0
None Remote Low Not required Partial None None
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
1317 CVE-2001-0195 +Priv 2001-03-26 2017-10-10
2.1
None Local Low Not required Partial None None
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
1318 CVE-2001-0194 Exec Code Overflow 2001-05-03 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
1319 CVE-2001-0193 +Priv 2001-05-03 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
1320 CVE-2001-0192 Exec Code Overflow 2001-05-03 2008-09-05
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.
1321 CVE-2001-0191 Exec Code Overflow 2001-05-03 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
1322 CVE-2001-0190 Overflow +Priv 2001-03-26 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
1323 CVE-2001-0189 Dir. Trav. 2001-03-26 2017-10-10
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
1324 CVE-2001-0188 DoS 2001-03-26 2017-12-19
5.0
None Remote Low Not required None None Partial
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
1325 CVE-2001-0187 Exec Code 2001-03-26 2017-10-10
10.0
None Remote Low Not required Complete Complete Complete
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
1326 CVE-2001-0186 Dir. Trav. 2001-05-03 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
1327 CVE-2001-0185 DoS 2001-03-26 2017-10-10
5.0
None Remote Low Not required None None Partial
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash.
1328 CVE-2001-0184 DoS 2001-03-26 2017-12-19
2.6
None Remote High Not required None None Partial
eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.
1329 CVE-2001-0183 Bypass 2001-03-26 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
1330 CVE-2001-0182 DoS 2001-03-26 2017-10-10
5.0
None Remote Low Not required None None Partial
FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.
1331 CVE-2001-0181 Exec Code 2001-03-26 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
1332 CVE-2001-0180 Exec Code 2001-05-03 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
1333 CVE-2001-0179 2001-05-03 2017-10-10
5.0
None Remote Low Not required Partial None None
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
1334 CVE-2001-0178 +Priv 2001-03-26 2017-10-10
2.1
None Local Low Not required Partial None None
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
1335 CVE-2001-0177 DoS 2001-03-26 2017-12-19
5.0
None Remote Low Not required None None Partial
WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.
1336 CVE-2001-0176 Exec Code +Priv 2001-03-26 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
1337 CVE-2001-0175 DoS 2001-03-26 2017-10-10
5.0
None Remote Low Not required None None Partial
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
1338 CVE-2001-0174 DoS Exec Code Overflow 2001-05-03 2017-10-10
7.6
None Remote High Not required Complete Complete Complete
Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address.
1339 CVE-2001-0173 Exec Code Overflow 2001-05-03 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
1340 CVE-2001-0172 DoS Exec Code Overflow 2001-03-26 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
1341 CVE-2001-0171 DoS Exec Code Overflow 2001-05-03 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
1342 CVE-2001-0170 2001-03-26 2017-10-10
2.1
None Local Low Not required Partial None None
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
1343 CVE-2001-0169 2001-03-26 2017-10-10
2.1
None Local Low Not required None Partial None
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
1344 CVE-2001-0168 Exec Code Overflow 2001-05-03 2017-12-19
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
1345 CVE-2001-0167 Exec Code Overflow 2001-05-03 2017-12-19
7.6
None Remote High Not required Complete Complete Complete
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
1346 CVE-2001-0166 DoS 2001-03-26 2017-10-10
7.6
None Remote High Not required Complete Complete Complete
Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.
1347 CVE-2001-0165 Overflow +Priv 2001-05-03 2018-10-30
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
1348 CVE-2001-0164 DoS Exec Code Overflow 2001-06-02 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.
1349 CVE-2001-0163 2001-01-01 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
1350 CVE-2001-0162 2001-01-01 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 (This Page)28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.