CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
101 CVE-2001-0751 2001-10-18 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.
102 CVE-2001-0750 DoS 2001-10-18 2017-10-10
5.0
 None Remote Low Not required None None Partial
Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999.
103 CVE-2001-0748 20 2001-10-18 2017-07-11
5.0
 None Remote Low Not required Partial None None
Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.
104 CVE-2001-0747 DoS Exec Code Overflow 2001-10-18 2017-08-17
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.
105 CVE-2001-0746 DoS Exec Code Overflow 2001-10-18 2017-12-19
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.
106 CVE-2001-0745 +Info 2001-10-18 2017-10-10
5.0
 None Remote Low Not required Partial None None
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.
107 CVE-2001-0744 2001-10-18 2008-09-10
2.1
 None Local Low Not required None Partial None
Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file.
108 CVE-2001-0743 DoS 2001-10-18 2008-09-05
5.0
 None Remote Low Not required None None Partial
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.
109 CVE-2001-0742 Overflow 2001-10-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command.
110 CVE-2001-0741 DoS 2001-10-18 2017-10-10
2.1
 None Local Low Not required None None Partial
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
111 CVE-2001-0740 DoS 2001-10-18 2017-10-10
5.0
 None Remote Low Not required None None Partial
3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnerability.
112 CVE-2001-0739 +Priv 2001-10-18 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.
113 CVE-2001-0738 DoS 2001-10-18 2017-10-10
5.0
 None Remote Low Not required None None Partial
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.
114 CVE-2001-0737 2001-10-18 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.
115 CVE-2001-0736 2001-10-18 2017-12-19
2.1
 None Local Low Not required None Partial None
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
116 CVE-2001-0735 Exec Code Overflow 2001-10-18 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
117 CVE-2001-0734 +Priv 2001-10-18 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Hitachi Super-H architecture in NetBSD 1.5 and 1.4.1 allows a local user to gain privileges via modified Status Register contents, which are not properly handled by (1) the sigreturn system call or (2) the process_write_regs kernel routine.
118 CVE-2001-0733 Exec Code 2001-10-18 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
119 CVE-2001-0731 Bypass 2001-10-01 2021-06-06
5.0
 None Remote Low Not required Partial None None
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.
120 CVE-2001-0730 2001-10-30 2021-06-06
5.0
 None Remote Low Not required None Partial None
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
121 CVE-2001-0729 Bypass 2001-10-30 2021-06-06
5.0
 None Remote Low Not required None None Partial
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.
122 CVE-2001-0728 Overflow +Priv 2001-10-30 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.
123 CVE-2001-0718 Exec Code Bypass 2001-10-30 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
124 CVE-2001-0717 Exec Code 2001-10-30 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.
125 CVE-2001-0715 +Info 2001-10-30 2011-03-08
2.1
 None Local Low Not required Partial None None
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode.
126 CVE-2001-0714 DoS 2001-10-30 2008-09-05
2.1
 None Local Low Not required None None Partial
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option.
127 CVE-2001-0713 +Priv 2001-10-30 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
128 CVE-2001-0712 2001-10-30 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.
129 CVE-2001-0670 Exec Code Overflow 2001-10-03 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.
130 CVE-2001-0669 2001-10-30 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
131 CVE-2001-0667 Exec Code 2001-10-30 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed, aka a new variant of the Telnet Invocation vulnerability as described in CVE-2001-0150.
132 CVE-2001-0666 400 DoS 2001-10-30 2020-04-02
2.1
 None Local Low Not required None None Partial
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
133 CVE-2001-0665 +Priv 2001-10-30 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."
134 CVE-2001-0664 Bypass 2001-10-30 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
135 CVE-2001-0662 DoS 2001-10-30 2018-10-12
5.0
 None Remote Low Not required None None Partial
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
136 CVE-2001-0660 2001-10-30 2018-10-12
5.0
 None Remote Low Not required Partial None None
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).
137 CVE-2001-0652 Overflow +Priv 2001-10-30 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
138 CVE-2001-0545 DoS 2001-10-30 2018-10-12
5.0
 None Remote Low Not required None None Partial
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.
139 CVE-2001-0544 DoS 2001-10-30 2018-10-30
2.1
 None Local Low Not required None None Partial
IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.
140 CVE-2001-0540 DoS 2001-10-30 2018-10-12
5.0
 None Remote Low Not required None None Partial
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
141 CVE-2001-0535 2001-10-30 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
142 CVE-2001-0505 DoS 2001-10-30 2018-10-12
5.0
 None Remote Low Not required None None Partial
Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
Total number of vulnerabilities : 142   Page : 1 2 3 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.