CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
201 CVE-2001-0148 Exec Code 2001-06-02 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
202 CVE-2001-0153 119 Exec Code Overflow 2001-05-03 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
203 CVE-2001-0154 2001-05-03 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.
204 CVE-2001-0155 Exec Code 2001-06-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers.
205 CVE-2001-0162 2001-01-01 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
206 CVE-2001-0164 DoS Exec Code Overflow 2001-06-02 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field.
207 CVE-2001-0183 Bypass 2001-03-26 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
208 CVE-2001-0201 2001-03-26 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
209 CVE-2001-0212 Exec Code Dir. Trav. 2001-06-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
210 CVE-2001-0216 Exec Code 2001-06-02 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
211 CVE-2001-0234 +Priv 2001-05-03 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
212 CVE-2001-0238 Bypass 2001-07-02 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
213 CVE-2001-0239 DoS 2001-07-02 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
214 CVE-2001-0242 Exec Code Overflow 2001-06-27 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
215 CVE-2001-0244 Exec Code Overflow 2001-06-27 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
216 CVE-2001-0256 DoS Exec Code 2001-06-02 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.
217 CVE-2001-0257 Exec Code Overflow 2001-06-02 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
218 CVE-2001-0260 Exec Code Overflow 2001-06-02 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.
219 CVE-2001-0262 Exec Code Overflow 2001-07-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
220 CVE-2001-0263 2001-06-18 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
221 CVE-2001-0274 Exec Code 2001-05-03 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
222 CVE-2001-0288 2001-05-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
223 CVE-2001-0292 2001-05-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
224 CVE-2001-0299 DoS Exec Code Overflow 2001-06-02 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
225 CVE-2001-0307 94 Exec Code 2001-05-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
226 CVE-2001-0308 94 Exec Code 2001-05-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
227 CVE-2001-0314 DoS Exec Code Overflow 2001-06-02 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link.
228 CVE-2001-0315 Bypass 2001-06-02 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.
229 CVE-2001-0318 Exec Code 2001-06-02 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd).
230 CVE-2001-0319 2001-05-03 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.
231 CVE-2001-0325 DoS Exec Code Overflow 2001-05-03 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command.
232 CVE-2001-0326 2001-05-03 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
233 CVE-2001-0329 Exec Code 2001-06-27 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi.
234 CVE-2001-0330 2001-06-27 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed.
235 CVE-2001-0331 Exec Code Overflow 2001-06-27 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
236 CVE-2001-0333 Exec Code Dir. Trav. 2001-06-27 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
237 CVE-2001-0339 2001-06-27 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability."
238 CVE-2001-0340 434 Exec Code 2001-07-21 2020-04-02
7.5
 None Remote Low Not required Partial Partial Partial
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
239 CVE-2001-0341 Exec Code Overflow 2001-07-21 2019-04-30
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
240 CVE-2001-0347 2001-07-21 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.
241 CVE-2001-0357 2001-08-22 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.
242 CVE-2001-0358 Exec Code Overflow 2001-06-27 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) a long exec command, or (3) long input in a configuration file.
243 CVE-2001-0359 Exec Code 2001-06-27 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.
244 CVE-2001-0365 Exec Code 2001-06-27 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.
245 CVE-2001-0374 Bypass 2001-06-18 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.
246 CVE-2001-0376 2001-06-18 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used.
247 CVE-2001-0382 +Priv 2001-06-18 2021-04-07
7.5
 None Remote Low Not required Partial Partial Partial
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application.
248 CVE-2001-0395 2001-07-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing.
249 CVE-2001-0397 DoS Exec Code Overflow 2001-06-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command.
250 CVE-2001-0398 Exec Code Bypass 2001-06-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT! to misrepresent the attachment's type with a different icon.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 (This Page)6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.