CVE Notifier

CVE-2001-0980 CWE-? N/A

CVE-2001-0980

docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0973 CWE-? N/A

CVE-2001-0973

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0969 CWE-? N/A

CVE-2001-0969

ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0965 CWE-? N/A

CVE-2001-0965

glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0963 CWE-? N/A

CVE-2001-0963

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0954 CWE-? N/A

CVE-2001-0954

Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) direc…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0879 CWE-? N/A

CVE-2001-0879

Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0877 CWE-? N/A

CVE-2001-0877

Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine t…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0876 CWE-? N/A

CVE-2001-0876

Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0875 CWE-? N/A

CVE-2001-0875

Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe t…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0874 CWE-? N/A

CVE-2001-0874

Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verifica…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0867 CWE-? N/A

CVE-2001-0867

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass th…

MITRE n/a:n/a 09 Mar 2002