CVE Notifier

CVE-2001-0658 CWE-? N/A

CVE-2001-0658

Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in …

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0653 CWE-? N/A

CVE-2001-0653

Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpr…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0652 CWE-? N/A

CVE-2001-0652

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0650 CWE-? N/A

CVE-2001-0650

Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0648 CWE-? N/A

CVE-2001-0648

Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..) attack on the file module.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0646 CWE-? N/A

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of a specific length.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0644 CWE-? N/A

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0641 CWE-? N/A

CVE-2001-0641

Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0635 CWE-? N/A

CVE-2001-0635

Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0634 CWE-? N/A

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0631 CWE-? N/A

CVE-2001-0631

Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identi…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0630 CWE-? N/A

CVE-2001-0630

Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable.

MITRE n/a:n/a 09 Mar 2002