CVE Notifier

CVE-2001-0373 CWE-? N/A

CVE-2001-0373

The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive informati…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0371 CWE-? N/A

CVE-2001-0371

Race condition in the UFS and EXT2FS file systems in FreeBSD 4.2 and earlier, and possibly other operating systems, makes deleted data available to user processes before it is zeroed out, which allows a local user to acc…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0366 CWE-? N/A

CVE-2001-0366

saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0365 CWE-? N/A

CVE-2001-0365

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with Act…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0364 CWE-? N/A

CVE-2001-0364

SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0327 CWE-? N/A

CVE-2001-0327

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, whi…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0321 CWE-? N/A

CVE-2001-0321

opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0280 CWE-? N/A

CVE-2001-0280

Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0276 CWE-? N/A

CVE-2001-0276

ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains…

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0269 CWE-? N/A

CVE-2001-0269

pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0265 CWE-? N/A

CVE-2001-0265

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.

MITRE n/a:n/a 09 Mar 2002

CVE-2001-0252 CWE-? N/A

CVE-2001-0252

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.

MITRE n/a:n/a 09 Mar 2002