CVE Notifier

CVE-2001-0629 CWE-? N/A

CVE-2001-0629

HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0628 CWE-? N/A

CVE-2001-0628

Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0627 CWE-? N/A

CVE-2001-0627

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0626 CWE-? N/A

CVE-2001-0626

O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0625 CWE-? N/A

CVE-2001-0625

ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0622 CWE-? N/A

CVE-2001-0622

The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0621 CWE-? N/A

CVE-2001-0621

The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0616 CWE-? N/A

CVE-2001-0616

Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0615 CWE-? N/A

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) att…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0613 CWE-? N/A

CVE-2001-0613

Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0611 CWE-? N/A

CVE-2001-0611

Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0596 CWE-? N/A

CVE-2001-0596

Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.

MITRE n/a:n/a 09 Mar 2002