CVE Notifier

CVE-2001-1099 CWE-? N/A

CVE-2001-1099

The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1096 CWE-? N/A

CVE-2001-1096

Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1095 CWE-? N/A

CVE-2001-1095

Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1089 CWE-? N/A

CVE-2001-1089

libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1088 CWE-? N/A

CVE-2001-1088

Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1085 CWE-? N/A

CVE-2001-1085

Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1084 CWE-? N/A

CVE-2001-1084

Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javas…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1083 CWE-? N/A

CVE-2001-1083

Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backwa…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1079 CWE-? N/A

CVE-2001-1079

create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1074 CWE-? N/A

CVE-2001-1074

Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1072 CWE-? N/A

CVE-2001-1072

Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule …

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1071 CWE-? N/A

CVE-2001-1071

Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.

MITRE n/a:n/a 25 Jun 2002