CVE Notifier

CVE-2001-1205 CWE-? N/A

CVE-2001-1205

Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1204 CWE-? N/A

CVE-2001-1204

Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1202 CWE-? N/A

CVE-2001-1202

Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a U…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1198 CWE-? N/A

CVE-2001-1198

RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1197 CWE-? N/A

CVE-2001-1197

klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1196 CWE-? N/A

CVE-2001-1196

Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1195 CWE-? N/A

CVE-2001-1195

Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1194 CWE-? N/A

CVE-2001-1194

Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilob…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1192 CWE-? N/A

CVE-2001-1192

Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1191 CWE-? N/A

CVE-2001-1191

WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1190 CWE-? N/A

CVE-2001-1190

The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1189 CWE-? N/A

CVE-2001-1189

IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.

MITRE n/a:n/a 15 Mar 2002