CVE Notifier

CVE-2001-1188 CWE-? N/A

CVE-2001-1188

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1187 CWE-? N/A

CVE-2001-1187

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1184 CWE-? N/A

CVE-2001-1184

wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which c…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1182 CWE-? N/A

CVE-2001-1182

Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1181 CWE-? N/A

CVE-2001-1181

Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1179 CWE-? N/A

CVE-2001-1179

xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1178 CWE-? N/A

CVE-2001-1178

Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1173 CWE-? N/A

CVE-2001-1173

Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1171 CWE-? N/A

CVE-2001-1171

Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1170 CWE-? N/A

CVE-2001-1170

AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1169 CWE-? N/A

CVE-2001-1169

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activiti…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1168 CWE-? N/A

CVE-2001-1168

Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.

MITRE n/a:n/a 15 Mar 2002