CVE Notifier

CVE-2001-1218 CWE-? N/A

CVE-2001-1218

Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1217 CWE-? N/A

CVE-2001-1217

Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1216 CWE-? N/A

CVE-2001-1216

Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1214 CWE-? N/A

CVE-2001-1214

manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1213 CWE-? N/A

CVE-2001-1213

The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1212 CWE-? N/A

CVE-2001-1212

Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1211 CWE-? N/A

CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1210 CWE-? N/A

CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write informatio…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1209 CWE-? N/A

CVE-2001-1209

Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1208 CWE-? N/A

CVE-2001-1208

Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1207 CWE-? N/A

CVE-2001-1207

Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1206 CWE-? N/A

CVE-2001-1206

Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.

MITRE n/a:n/a 15 Mar 2002