CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001 (CVSS score >= 3)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1351 CVE-2001-0005 Exec Code Overflow 2001-02-12 2018-10-12
6.2
 None Local High Not required Complete Complete Complete
Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
1352 CVE-2001-0004 2001-02-12 2018-10-30
5.0
 None Remote Low Not required Partial None None
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.
1353 CVE-2001-0003 2001-02-12 2018-10-12
5.0
 None Remote Low Not required Partial None None
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
1354 CVE-2001-0002 2001-07-21 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
1355 CVE-2001-0001 Bypass 2001-06-02 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.
1356 CVE-2000-1215 +Info 2001-09-19 2017-07-11
5.0
 None Remote Low Not required Partial None None
The default configuration of Lotus Domino server 5.0.8 includes system information (version, operating system, and build date) in the HTTP headers of replies, which allows remote attackers to obtain sensitive information.
1357 CVE-2000-1203 DoS 2001-08-20 2017-10-10
5.0
 None Remote Low Not required None None Partial
Lotus Domino SMTP server 4.63 through 5.08 allows remote attackers to cause a denial of service (CPU consumption) by forging an email message with the sender as bounce@[127.0.0.1] (localhost), which causes Domino to enter a mail loop.
1358 CVE-2000-1202 Exec Code 2001-08-31 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class.
1359 CVE-2000-1201 DoS 2001-08-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264.
1360 CVE-2000-1200 +Info 2001-08-31 2017-10-10
5.0
 None Remote Low Not required Partial None None
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
1361 CVE-2000-1199 +Priv 2001-08-31 2017-12-19
4.6
 None Local Low Not required Partial Partial Partial
PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
1362 CVE-2000-1196 1 2001-08-31 2017-10-10
5.0
 None Remote Low Not required Partial None None
PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter.
1363 CVE-2000-1195 Bypass 2001-08-31 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.
1364 CVE-2000-1194 DoS Exec Code 2001-08-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands.
1365 CVE-2000-1193 DoS 2001-08-31 2017-10-10
5.0
 None Remote Low Not required None None Partial
Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port.
1366 CVE-2000-1192 DoS Exec Code Overflow 2001-08-31 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap.
1367 CVE-2000-1191 209 2001-08-31 2020-12-09
5.0
 None Remote Low Not required Partial None None
htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path.
1368 CVE-2000-1189 Overflow +Priv 2001-01-09 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain privileges.
1369 CVE-2000-1188 Dir. Trav. 2001-01-09 2008-09-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.
1370 CVE-2000-1187 Exec Code Overflow 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
1371 CVE-2000-1186 Exec Code Overflow 2001-01-09 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header.
1372 CVE-2000-1185 DoS 2001-01-09 2008-09-05
5.0
 None Remote Low Not required None None Partial
The telnet proxy in RideWay PN proxy server allows remote attackers to cause a denial of service via a flood of connections that contain malformed requests.
1373 CVE-2000-1184 DoS 2001-01-09 2017-10-10
5.0
 None Remote Low Not required None None Partial
telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file.
1374 CVE-2000-1183 Exec Code Overflow 2001-01-09 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.
1375 CVE-2000-1182 DoS 2001-01-09 2017-10-10
5.0
 None Remote Low Not required None None Partial
WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling.
1376 CVE-2000-1181 +Info 2001-01-09 2017-10-10
5.0
 None Remote Low Not required Partial None None
Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possibly including sensitive information, by accessing the /admin/includes/ URL.
1377 CVE-2000-1180 Overflow +Priv 2001-01-09 2018-05-03
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.
1378 CVE-2000-1179 2001-01-09 2017-10-10
5.0
 None Remote Low Not required Partial None None
Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without authentication by directly connecting to the login screen and typing certain control characters.
1379 CVE-2000-1177 2001-01-09 2008-09-05
5.0
 None Remote Low Not required Partial None None
bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and user ID's by specifying the target file in the HISTFILE parameter.
1380 CVE-2000-1176 Dir. Trav. 2001-01-09 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.
1381 CVE-2000-1175 Exec Code Overflow 2001-01-09 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.
1382 CVE-2000-1174 Exec Code Overflow 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.
1383 CVE-2000-1173 +Info 2001-01-09 2008-09-05
5.0
 None Remote Low Not required Partial None None
Microsys CyberPatrol uses weak encryption (trivial encoding) for credit card numbers and uses no encryption for the remainder of the information during registration, which could allow attackers to sniff network traffic and obtain this sensitive information.
1384 CVE-2000-1172 DoS Exec Code Overflow 2001-01-09 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML tag.
1385 CVE-2000-1171 Dir. Trav. 2001-01-09 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.
1386 CVE-2000-1170 Exec Code Overflow 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.
1387 CVE-2000-1169 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
1388 CVE-2000-1168 DoS Exec Code 2001-01-09 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.
1389 CVE-2000-1167 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
1390 CVE-2000-1166 2001-01-09 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program.
1391 CVE-2000-1165 DoS 2001-01-09 2017-10-10
5.0
 None Remote Low Not required None None Partial
Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a malformed log message that does not have a closing > in the priority specifier.
1392 CVE-2000-1164 2001-01-09 2017-10-10
9.0
 None Remote Low ??? Complete Complete Complete
WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and modify) to the Everybody group, which allows users to read and modify sensitive information such as passwords and gain access to the system.
1393 CVE-2000-1163 Exec Code 2001-01-09 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
1394 CVE-2000-1162 2001-01-09 2017-10-10
3.7
 None Local High Not required Partial Partial Partial
ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack.
1395 CVE-2000-1161 2001-01-09 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases.
1396 CVE-2000-1160 DoS 2001-01-09 2008-09-05
5.0
 None Remote Low Not required None None Partial
NAI Sniffer Agent allows remote attackers to cause a denial of service (crash) by sending a large number of login requests.
1397 CVE-2000-1159 +Priv 2001-01-09 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
NAI Sniffer Agent allows remote attackers to gain privileges on the agent by sniffing the initial UDP authentication packets and spoofing commands.
1398 CVE-2000-1158 2001-01-09 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
NAI Sniffer Agent uses base64 encoding for authentication, which allows attackers to sniff the network and easily decrypt usernames and passwords.
1399 CVE-2000-1157 Exec Code Overflow 2001-01-09 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.
1400 CVE-2000-1156 2001-01-09 2017-12-19
3.6
 None Local Low Not required Partial Partial None
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
Total number of vulnerabilities : 1506   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 (This Page)29 30 31
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.