CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In October 2001

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2001-1051 2001-10-02 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
52 CVE-2001-1050 2001-10-02 2017-12-19
7.5
None Remote Low Not required Partial Partial Partial
CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
53 CVE-2001-1049 2001-10-02 2008-09-10
7.5
None Remote Low Not required Partial Partial Partial
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
54 CVE-2001-1048 2001-10-02 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
55 CVE-2001-1015 Overflow +Priv 2001-10-16 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.
56 CVE-2001-0923 Exec Code 2001-10-25 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
57 CVE-2001-0907 DoS 2001-10-18 2018-09-20
2.1
None Local Low Not required None None Partial
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
58 CVE-2001-0905 DoS +Priv 2001-10-18 2017-10-10
6.2
None Local High Not required Complete Complete Complete
Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running.
59 CVE-2001-0795 2001-10-18 2008-09-05
5.0
None Remote Low Not required Partial None None
Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.
60 CVE-2001-0794 DoS Overflow 2001-10-18 2008-09-05
5.0
None Remote Low Not required None None Partial
Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command.
61 CVE-2001-0792 Exec Code 2001-10-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.
62 CVE-2001-0791 2001-10-18 2008-09-05
5.0
None Remote Low Not required None Partial None
Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access.
63 CVE-2001-0790 DoS 2001-10-18 2008-09-05
5.0
None Remote Low Not required None None Partial
Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the server to consume CPU while preparing alerts.
64 CVE-2001-0789 DoS Exec Code 2001-10-18 2018-11-28
10.0
None Remote Low Not required Complete Complete Complete
Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message.
65 CVE-2001-0788 2001-10-18 2008-09-05
5.0
None Remote Low Not required Partial None None
Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header.
66 CVE-2001-0787 2001-10-18 2017-10-10
4.6
None Local Low Not required Partial Partial Partial
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.
67 CVE-2001-0786 2001-10-18 2008-09-05
5.0
None Remote Low Not required Partial None None
Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.Dat file.
68 CVE-2001-0785 Dir. Trav. 2001-10-18 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote attackers to read arbitrary files via a .. (dot dot) attack.
69 CVE-2001-0784 Dir. Trav. 2001-10-18 2017-10-10
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters.
70 CVE-2001-0783 2001-10-18 2017-12-19
5.0
None Remote Low Not required Partial None None
Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.
71 CVE-2001-0782 +Priv 2001-10-18 2017-12-19
7.2
None Local Low Not required Complete Complete Complete
KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file.
72 CVE-2001-0780 22 Dir. Trav. 2001-10-18 2016-05-25
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.
73 CVE-2001-0779 Overflow 2001-10-18 2018-10-30
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.
74 CVE-2001-0778 2001-10-18 2017-12-19
5.0
None Remote Low Not required None Partial None
OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).
75 CVE-2001-0777 DoS 2001-10-18 2017-12-19
5.0
None Remote Low Not required None None Partial
Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.
76 CVE-2001-0776 DoS Overflow 2001-10-18 2017-12-19
5.0
None Remote Low Not required None None Partial
Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service.
77 CVE-2001-0775 119 Exec Code Overflow 2001-10-18 2016-05-20
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.
78 CVE-2001-0774 +Priv 2001-10-18 2017-10-10
4.6
None Local Low Not required Partial Partial Partial
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.
79 CVE-2001-0773 DoS 2001-10-18 2017-10-10
5.0
None Remote Low Not required None None Partial
Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.
80 CVE-2001-0772 DoS Overflow +Priv 2001-10-18 2017-12-19
4.6
None Local Low Not required Partial Partial Partial
Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges.
81 CVE-2001-0771 264 2001-10-18 2018-11-29
7.5
None Remote Low Not required Partial Partial Partial
Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field.
82 CVE-2001-0770 Exec Code Overflow 2001-10-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command.
83 CVE-2001-0769 DoS 2001-10-18 2017-10-10
5.0
None Remote Low Not required None None Partial
Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.
84 CVE-2001-0768 +Priv 2001-10-18 2017-12-19
4.6
None Local Low Not required Partial Partial Partial
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
85 CVE-2001-0767 Dir. Trav. 2001-10-18 2008-09-05
5.0
None Remote Low Not required Partial None None
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.
86 CVE-2001-0766 Bypass 2001-10-18 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
87 CVE-2001-0765 2001-10-18 2017-10-10
4.6
None Local Low Not required Partial Partial Partial
BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.
88 CVE-2001-0764 Exec Code Overflow 2001-10-18 2017-10-10
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
89 CVE-2001-0763 Exec Code Overflow 2001-10-18 2018-05-03
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.
90 CVE-2001-0762 Exec Code Overflow 2001-10-18 2008-09-05
4.6
None Local Low Not required Partial Partial Partial
Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.
91 CVE-2001-0761 Exec Code Overflow 2001-10-18 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter.
92 CVE-2001-0760 2001-10-18 2017-10-10
5.0
None Remote Low Not required Partial None None
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
93 CVE-2001-0759 Exec Code Overflow 2001-10-18 2008-09-05
7.2
None Local Low Not required Complete Complete Complete
Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.
94 CVE-2001-0758 Dir. Trav. 2001-10-18 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.
95 CVE-2001-0757 2001-10-18 2017-10-10
7.5
None Remote Low Not required Partial Partial Partial
Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet.
96 CVE-2001-0756 Exec Code 2001-10-18 2016-10-18
7.5
None Remote Low Not required Partial Partial Partial
CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter.
97 CVE-2001-0755 DoS Exec Code Overflow 2001-10-18 2008-09-05
7.5
None Remote Low Not required Partial Partial Partial
Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.
98 CVE-2001-0754 DoS 2001-10-18 2017-10-10
5.0
None Remote Low Not required None None Partial
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.
99 CVE-2001-0753 +Priv 2001-10-18 2017-07-11
7.5
None Remote Low Not required Partial Partial Partial
Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges.
100 CVE-2001-0752 DoS 2001-10-18 2017-10-10
5.0
None Remote Low Not required None None Partial
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.
Total number of vulnerabilities : 142   Page : 1 2 (This Page)3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.