CVE Notifier

CVE-2001-0542 CWE-? N/A

CVE-2001-0542

Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime fo…

MITRE n/a:n/a 18 Feb 2002

CVE-2001-1082 CWE-? N/A

CVE-2001-1082

Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1078 CWE-? N/A

CVE-2001-1078

Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, an…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1077 CWE-? N/A

CVE-2001-1077

Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1076 CWE-? N/A

CVE-2001-1076

Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1073 CWE-? N/A

CVE-2001-1073

Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the …

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1070 CWE-? N/A

CVE-2001-1070

Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1068 CWE-? N/A

CVE-2001-1068

qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1065 CWE-? N/A

CVE-2001-1065

Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1064 CWE-? N/A

CVE-2001-1064

Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to be…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1061 CWE-? N/A

CVE-2001-1061

Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1060 CWE-? N/A

CVE-2001-1060

phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.

MITRE n/a:n/a 02 Feb 2002