CVE Notifier

CVE-2001-1295 CWE-? N/A

CVE-2001-1295

Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1277 CWE-? N/A

CVE-2001-1277

makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1276 CWE-? N/A

CVE-2001-1276

ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1266 CWE-? N/A

CVE-2001-1266

Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1252 CWE-? N/A

CVE-2001-1252

Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) co…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1247 CWE-? N/A

CVE-2001-1247

PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1246 CWE-? N/A

CVE-2001-1246

PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1240 CWE-? N/A

CVE-2001-1240

The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1237 CWE-? N/A

CVE-2001-1237

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1236 CWE-? N/A

CVE-2001-1236

myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1235 CWE-? N/A

CVE-2001-1235

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1234 CWE-? N/A

CVE-2001-1234

Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.

MITRE n/a:n/a 25 Jun 2002