CVE Notifier

CVE-2001-1058 CWE-? N/A

CVE-2001-1058

The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host th…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1057 CWE-? N/A

CVE-2001-1057

The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making lice…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1052 CWE-? N/A

CVE-2001-1052

Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1051 CWE-? N/A

CVE-2001-1051

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1050 CWE-? N/A

CVE-2001-1050

CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1047 CWE-? N/A

CVE-2001-1047

Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) …

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1045 CWE-? N/A

CVE-2001-1045

Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1044 CWE-? N/A

CVE-2001-1044

Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MyS…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1042 CWE-? N/A

CVE-2001-1042

Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1041 CWE-? N/A

CVE-2001-1041

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORA…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1040 CWE-? N/A

CVE-2001-1040

HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1039 CWE-? N/A

CVE-2001-1039

The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.

MITRE n/a:n/a 02 Feb 2002