CVE Notifier

CVE-2001-1109 CWE-? N/A

CVE-2001-1109

Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1107 CWE-? N/A

CVE-2001-1107

SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1105 CWE-? N/A

CVE-2001-1105

RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by lo…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1104 CWE-? N/A

CVE-2001-1104

SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1102 CWE-? N/A

CVE-2001-1102

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1101 CWE-? N/A

CVE-2001-1101

The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbi…

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1097 CWE-? N/A

CVE-2001-1097

Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1094 CWE-? N/A

CVE-2001-1094

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1093 CWE-? N/A

CVE-2001-1093

Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1092 CWE-? N/A

CVE-2001-1092

msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1091 CWE-? N/A

CVE-2001-1091

The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.

MITRE n/a:n/a 15 Mar 2002

CVE-2001-1090 CWE-? N/A

CVE-2001-1090

nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.

MITRE n/a:n/a 15 Mar 2002