CVE Notifier

CVE-2001-1034 CWE-? N/A

CVE-2001-1034

Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1033 CWE-? N/A

CVE-2001-1033

Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1031 CWE-? N/A

CVE-2001-1031

Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1026 CWE-? N/A

CVE-2001-1026

Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1025 CWE-? N/A

CVE-2001-1025

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such …

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1024 CWE-? N/A

CVE-2001-1024

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1023 CWE-? N/A

CVE-2001-1023

Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1021 CWE-? N/A

CVE-2001-1021

Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1019 CWE-? N/A

CVE-2001-1019

Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1018 CWE-? N/A

CVE-2001-1018

Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1015 CWE-? N/A

CVE-2001-1015

Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1014 CWE-? N/A

CVE-2001-1014

eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.

MITRE n/a:n/a 02 Feb 2002