CVE Notifier

CVE-2001-1254 CWE-? N/A

CVE-2001-1254

Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote at…

MITRE n/a:n/a 03 May 2002

CVE-2001-1253 CWE-? N/A

CVE-2001-1253

Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.

MITRE n/a:n/a 03 May 2002

CVE-2001-1250 CWE-? N/A

CVE-2001-1250

vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.

MITRE n/a:n/a 03 May 2002

CVE-2001-1249 CWE-? N/A

CVE-2001-1249

vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.

MITRE n/a:n/a 03 May 2002

CVE-2001-1248 CWE-? N/A

CVE-2001-1248

vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).

MITRE n/a:n/a 03 May 2002

CVE-2001-1245 CWE-? N/A

CVE-2001-1245

Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.

MITRE n/a:n/a 03 May 2002

CVE-2001-1244 CWE-? N/A

CVE-2001-1244

Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data,…

MITRE n/a:n/a 03 May 2002

CVE-2001-1243 CWE-? N/A

CVE-2001-1243

Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a fil…

MITRE n/a:n/a 03 May 2002

CVE-2001-1242 CWE-? N/A

CVE-2001-1242

Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.

MITRE n/a:n/a 03 May 2002

CVE-2001-1241 CWE-? N/A

CVE-2001-1241

Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!"…

MITRE n/a:n/a 03 May 2002

CVE-2001-1239 CWE-? N/A

CVE-2001-1239

PowerNet IX allows remote attackers to cause a denial of service via a port scan.

MITRE n/a:n/a 03 May 2002

CVE-2001-1238 CWE-? N/A

CVE-2001-1238

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users t…

MITRE n/a:n/a 03 May 2002