CVE Notifier

CVE-2001-1062 CWE-? N/A

CVE-2001-1062

Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1053 CWE-? N/A

CVE-2001-1053

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1046 CWE-? N/A

CVE-2001-1046

Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1043 CWE-? N/A

CVE-2001-1043

ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1032 CWE-? N/A

CVE-2001-1032

admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by d…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1030 CWE-? N/A

CVE-2001-1030

Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduc…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1027 CWE-? N/A

CVE-2001-1027

Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1022 CWE-? N/A

CVE-2001-1022

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the pl…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-1002 CWE-? N/A

CVE-2001-1002

The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printin…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0981 CWE-? N/A

CVE-2001-0981

HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0977 CWE-? N/A

CVE-2001-0977

slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0962 CWE-? N/A

CVE-2001-0962

IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.

MITRE n/a:n/a 25 Jun 2002