CVE Notifier

CVE-2001-1165 CWE-? N/A

CVE-2001-1165

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1164 CWE-? N/A

CVE-2001-1164

Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1163 CWE-? N/A

CVE-2001-1163

Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1159 CWE-? N/A

CVE-2001-1159

load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir op…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1157 CWE-? N/A

CVE-2001-1157

Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before …

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1156 CWE-? N/A

CVE-2001-1156

TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1154 CWE-? N/A

CVE-2001-1154

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1152 CWE-? N/A

CVE-2001-1152

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1151 CWE-? N/A

CVE-2001-1151

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, …

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1150 CWE-? N/A

CVE-2001-1150

Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1148 CWE-? N/A

CVE-2001-1148

Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh,…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1143 CWE-? N/A

CVE-2001-1143

IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.

MITRE n/a:n/a 15 Mar 2002