CVE Notifier

CVE-2001-1127 CWE-? N/A

CVE-2001-1127

Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv, (2) _mprosrv, (3) _mprshut, (4) orarx, (5) sqlcpp, (6) _probrkr, (7) _sqlschema and (8) _sqldump.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1126 CWE-? N/A

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1125 CWE-? N/A

CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1124 CWE-? N/A

CVE-2001-1124

rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1123 CWE-? N/A

CVE-2001-1123

Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1122 CWE-? N/A

CVE-2001-1122

Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1120 CWE-? N/A

CVE-2001-1120

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1115 CWE-? N/A

CVE-2001-1115

generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1114 CWE-? N/A

CVE-2001-1114

book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1112 CWE-? N/A

CVE-2001-1112

Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1111 CWE-? N/A

CVE-2001-1111

EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1110 CWE-? N/A

CVE-2001-1110

EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and al…

MITRE n/a:n/a 15 Mar 2002