CVE Notifier

CVE-2001-1146 CWE-? N/A

CVE-2001-1146

AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1144 CWE-? N/A

CVE-2001-1144

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1141 CWE-? N/A

CVE-2001-1141

The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to pre…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1132 CWE-? N/A

CVE-2001-1132

Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during auth…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1130 CWE-? N/A

CVE-2001-1130

Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1119 CWE-? N/A

CVE-2001-1119

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1118 CWE-? N/A

CVE-2001-1118

A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1117 CWE-? N/A

CVE-2001-1117

LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1116 CWE-? N/A

CVE-2001-1116

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a second…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1113 CWE-? N/A

CVE-2001-1113

Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1108 CWE-? N/A

CVE-2001-1108

Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1100 CWE-? N/A

CVE-2001-1100

sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.

MITRE n/a:n/a 25 Jun 2002