CVE Notifier

CVE-2001-1268 CWE-? N/A

CVE-2001-1268

Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

MITRE n/a:n/a 03 May 2002

CVE-2001-1265 CWE-? N/A

CVE-2001-1265

Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 03 May 2002

CVE-2001-1264 CWE-? N/A

CVE-2001-1264

Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.

MITRE n/a:n/a 03 May 2002

CVE-2001-1263 CWE-? N/A

CVE-2001-1263

telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.

MITRE n/a:n/a 03 May 2002

CVE-2001-1262 CWE-? N/A

CVE-2001-1262

Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length com…

MITRE n/a:n/a 03 May 2002

CVE-2001-1261 CWE-? N/A

CVE-2001-1261

Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.

MITRE n/a:n/a 03 May 2002

CVE-2001-1260 CWE-? N/A

CVE-2001-1260

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.

MITRE n/a:n/a 03 May 2002

CVE-2001-1259 CWE-? N/A

CVE-2001-1259

Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.

MITRE n/a:n/a 03 May 2002

CVE-2001-1258 CWE-? N/A

CVE-2001-1258

Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.

MITRE n/a:n/a 03 May 2002

CVE-2001-1257 CWE-? N/A

CVE-2001-1257

Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.

MITRE n/a:n/a 03 May 2002

CVE-2001-1256 CWE-? N/A

CVE-2001-1256

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.

MITRE n/a:n/a 03 May 2002

CVE-2001-1255 CWE-? N/A

CVE-2001-1255

WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.

MITRE n/a:n/a 03 May 2002