CVE Notifier

CVE-2001-0866 CWE-? N/A

CVE-2001-0866

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers …

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0865 CWE-? N/A

CVE-2001-0865

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0864 CWE-? N/A

CVE-2001-0864

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets …

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0863 CWE-? N/A

CVE-2001-0863

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of …

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0862 CWE-? N/A

CVE-2001-0862

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0861 CWE-? N/A

CVE-2001-0861

Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unre…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0860 CWE-? N/A

CVE-2001-0860

Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP ad…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0859 CWE-? N/A

CVE-2001-0859

2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0857 CWE-? N/A

CVE-2001-0857

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0852 CWE-? N/A

CVE-2001-0852

TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0851 CWE-? N/A

CVE-2001-0851

Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0850 CWE-? N/A

CVE-2001-0850

A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.

MITRE n/a:n/a 09 Mar 2002