CVE Notifier

CVE-2001-0961 CWE-? N/A

CVE-2001-0961

Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0946 CWE-? N/A

CVE-2001-0946

apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of se…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0940 CWE-? N/A

CVE-2001-0940

Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0939 CWE-? N/A

CVE-2001-0939

Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0936 CWE-? N/A

CVE-2001-0936

Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0929 CWE-? N/A

CVE-2001-0929

Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to…

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0920 CWE-? N/A

CVE-2001-0920

Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0918 CWE-? N/A

CVE-2001-0918

Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0917 CWE-? N/A

CVE-2001-0917

Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0912 CWE-? N/A

CVE-2001-0912

Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0906 CWE-? N/A

CVE-2001-0906

teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.

MITRE n/a:n/a 25 Jun 2002

CVE-2001-0905 CWE-? N/A

CVE-2001-0905

Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already …

MITRE n/a:n/a 25 Jun 2002