CVE Notifier

CVE-2001-1037 CWE-? N/A

CVE-2001-1037

Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1035 CWE-? N/A

CVE-2001-1035

Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1020 CWE-? N/A

CVE-2001-1020

edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru functi…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1017 CWE-? N/A

CVE-2001-1017

rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1016 CWE-? N/A

CVE-2001-1016

PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an a…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1011 CWE-? N/A

CVE-2001-1011

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other param…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-1010 CWE-? N/A

CVE-2001-1010

Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0998 CWE-? N/A

CVE-2001-0998

IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0995 CWE-? N/A

CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0993 CWE-? N/A

CVE-2001-0993

sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0987 CWE-? N/A

CVE-2001-0987

Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGI…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0982 CWE-? N/A

CVE-2001-0982

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.

MITRE n/a:n/a 09 Mar 2002