CVE Notifier

CVE-2001-1013 CWE-? N/A

CVE-2001-1013

Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote …

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1012 CWE-? N/A

CVE-2001-1012

Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1009 CWE-? N/A

CVE-2001-1009

Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1007 CWE-? N/A

CVE-2001-1007

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a br…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1006 CWE-? N/A

CVE-2001-1006

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different appli…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1005 CWE-? N/A

CVE-2001-1005

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain pr…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1004 CWE-? N/A

CVE-2001-1004

Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1003 CWE-? N/A

CVE-2001-1003

Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-1000 CWE-? N/A

CVE-2001-1000

rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0999 CWE-? N/A

CVE-2001-0999

Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not ru…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0997 CWE-? N/A

CVE-2001-0997

Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0996 CWE-? N/A

CVE-2001-0996

POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail cl…

MITRE n/a:n/a 02 Feb 2002