CVE Notifier

CVE-2001-1175 CWE-? N/A

CVE-2001-1175

vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1174 CWE-? N/A

CVE-2001-1174

Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1172 CWE-? N/A

CVE-2001-1172

OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1166 CWE-? N/A

CVE-2001-1166

linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1162 CWE-? N/A

CVE-2001-1162

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1161 CWE-? N/A

CVE-2001-1161

Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the re…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1160 CWE-? N/A

CVE-2001-1160

udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1158 CWE-? N/A

CVE-2001-1158

Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrar…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1155 CWE-? N/A

CVE-2001-1155

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restr…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1153 CWE-? N/A

CVE-2001-1153

lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1149 CWE-? N/A

CVE-2001-1149

Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1147 CWE-? N/A

CVE-2001-1147

The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used…

MITRE n/a:n/a 25 Jun 2002