CVE Notifier

CVE-2001-1283 CWE-? N/A

CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs …

MITRE n/a:n/a 03 May 2002

CVE-2001-1282 CWE-? N/A

CVE-2001-1282

Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information.

MITRE n/a:n/a 03 May 2002

CVE-2001-1281 CWE-? N/A

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.

MITRE n/a:n/a 03 May 2002

CVE-2001-1280 CWE-? N/A

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.

MITRE n/a:n/a 03 May 2002

CVE-2001-1278 CWE-? N/A

CVE-2001-1278

Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.

MITRE n/a:n/a 03 May 2002

CVE-2001-1275 CWE-? N/A

CVE-2001-1275

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

MITRE n/a:n/a 03 May 2002

CVE-2001-1274 CWE-? N/A

CVE-2001-1274

Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

MITRE n/a:n/a 03 May 2002

CVE-2001-1273 CWE-? N/A

CVE-2001-1273

The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).

MITRE n/a:n/a 03 May 2002

CVE-2001-1272 CWE-? N/A

CVE-2001-1272

wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.

MITRE n/a:n/a 03 May 2002

CVE-2001-1271 CWE-? N/A

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.

MITRE n/a:n/a 03 May 2002

CVE-2001-1270 CWE-? N/A

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) atta…

MITRE n/a:n/a 03 May 2002

CVE-2001-1269 CWE-? N/A

CVE-2001-1269

Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.

MITRE n/a:n/a 03 May 2002