CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
351 CVE-2001-0781 284 Exec Code Overflow 2001-05-30 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.
352 CVE-2001-0792 Exec Code 2001-10-18 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.
353 CVE-2001-0815 Exec Code Overflow 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.
354 CVE-2001-0816 Bypass 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.
355 CVE-2001-0818 Exec Code Overflow 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data.
356 CVE-2001-0819 119 Exec Code Overflow 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
A buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary code via a large 'To:' field in an email header.
357 CVE-2001-0820 Exec Code Overflow 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
358 CVE-2001-0824 XSS 2001-12-06 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
359 CVE-2001-0826 Exec Code Overflow 2001-12-06 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
360 CVE-2001-0835 XSS 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.
361 CVE-2001-0836 Exec Code Overflow 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
362 CVE-2001-0838 Exec Code 2001-12-06 2017-07-12
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.
363 CVE-2001-0839 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.
364 CVE-2001-0841 +Priv Dir. Trav. 2001-12-06 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
365 CVE-2001-0842 +Priv Dir. Trav. 2001-12-06 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
366 CVE-2001-0844 Exec Code 2001-12-06 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.
367 CVE-2001-0847 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID.
368 CVE-2001-0849 Exec Code 2001-12-06 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.
369 CVE-2001-0857 XSS 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
370 CVE-2001-0860 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
371 CVE-2001-0862 Bypass 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.
372 CVE-2001-0864 Bypass 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.
373 CVE-2001-0865 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.
374 CVE-2001-0866 Bypass 2001-12-06 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.
375 CVE-2001-0867 Bypass 2001-12-06 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.
376 CVE-2001-0869 Exec Code 2001-12-21 2018-05-03
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
377 CVE-2001-0871 Exec Code Dir. Trav. 2001-12-21 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
378 CVE-2001-0875 2001-11-26 2021-07-23
7.5
 None Remote Low Not required Partial Partial Partial
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.
379 CVE-2001-0876 Exec Code Overflow 2001-12-20 2018-10-12
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
380 CVE-2001-0889 Exec Code 2001-12-19 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.
381 CVE-2001-0899 Exec Code 2001-11-16 2019-07-01
7.5
 None Remote Low Not required Partial Partial Partial
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.
382 CVE-2001-0901 Exec Code 2001-11-19 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment.
383 CVE-2001-0902 2001-11-20 2018-10-30
7.5
 None Remote Low Not required Partial Partial Partial
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
384 CVE-2001-0903 2001-11-20 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.
385 CVE-2001-0908 2001-11-21 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
386 CVE-2001-0909 Exec Code Overflow 2001-11-21 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.
387 CVE-2001-0910 +Priv Bypass 2001-11-21 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup.
388 CVE-2001-0911 +Priv 2001-11-21 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
389 CVE-2001-0913 Exec Code 2001-11-22 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.
390 CVE-2001-0922 2001-11-26 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.
391 CVE-2001-0927 Exec Code 2001-11-27 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
392 CVE-2001-0928 Exec Code Overflow 2001-11-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
393 CVE-2001-0929 Bypass 2001-11-28 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.
394 CVE-2001-0930 Exec Code 2001-11-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.
395 CVE-2001-0931 Dir. Trav. 2001-11-28 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
396 CVE-2001-0932 DoS Exec Code Overflow 2001-11-28 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.
397 CVE-2001-0933 2001-11-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
398 CVE-2001-0934 2001-11-28 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.
399 CVE-2001-0935 2001-11-28 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.
400 CVE-2001-0936 Overflow 2001-11-30 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
Total number of vulnerabilities : 1677   Page : 1 2 3 4 5 6 7 8 (This Page)9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.