CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1651 CVE-2001-1560 DoS 2001-12-31 2019-04-30
2.1
 None Local Low Not required None None Partial
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.
1652 CVE-2001-1561 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
1653 CVE-2001-1562 +Priv 2001-12-31 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.
1654 CVE-2001-1563 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.
1655 CVE-2001-1564 DoS 2001-12-31 2017-10-12
2.1
 None Local Low Not required None None Partial
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.
1656 CVE-2001-1565 +Info 2001-12-31 2008-09-05
2.1
 None Local Low Not required Partial None None
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
1657 CVE-2001-1566 Exec Code 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
1658 CVE-2001-1567 Bypass 2001-12-31 2016-10-18
5.0
 None Remote Low Not required Partial None None
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
1659 CVE-2001-1568 2001-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
1660 CVE-2001-1569 2001-12-31 2008-09-05
6.4
 None Remote Low Not required Partial Partial None
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
1661 CVE-2001-1570 2001-12-31 2008-09-05
2.1
 None Local Low Not required None None Partial
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user (self) multiple times, which causes other accounts to be locked out.
1662 CVE-2001-1571 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
1663 CVE-2001-1572 Bypass 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
1664 CVE-2001-1573 Exec Code Overflow 2001-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter.
1665 CVE-2001-1574 Exec Code Overflow 2001-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
1666 CVE-2001-1575 DoS Overflow 2001-12-31 2017-07-11
5.0
 None Remote Low Not required None None Partial
Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow.
1667 CVE-2001-1576 Exec Code Overflow 2001-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
1668 CVE-2001-1577 +Priv 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.
1669 CVE-2001-1578 2001-12-31 2008-09-05
2.1
 None Local Low Not required None Partial None
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors.
1670 CVE-2001-1579 DoS 2001-12-31 2008-09-05
5.0
 None Remote Low Not required None None Partial
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
1671 CVE-2001-1580 Dir. Trav. 2001-12-31 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
1672 CVE-2001-1581 Bypass 2001-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.
1673 CVE-2001-1582 119 Exec Code Overflow 2001-12-31 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
1674 CVE-2001-1583 Exec Code 2001-12-31 2018-10-30
10.0
 None Remote Low Not required Complete Complete Complete
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
1675 CVE-2001-1584 20 Exec Code 2001-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
1676 CVE-2001-1585 287 Bypass 2001-12-31 2017-07-29
6.8
 None Remote Medium Not required Partial Partial Partial
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.
1677 CVE-2004-1776 2001-02-28 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 (This Page)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.