CVE Notifier

CVE-2001-0975 CWE-? N/A

CVE-2001-0975

Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0974 CWE-? N/A

CVE-2001-0974

Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0972 CWE-? N/A

CVE-2001-0972

Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0971 CWE-? N/A

CVE-2001-0971

Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0970 CWE-? N/A

CVE-2001-0970

Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0968 CWE-? N/A

CVE-2001-0968

Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0967 CWE-? N/A

CVE-2001-0967

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0966 CWE-? N/A

CVE-2001-0966

Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0964 CWE-? N/A

CVE-2001-0964

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0958 CWE-? N/A

CVE-2001-0958

Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dl…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0956 CWE-? N/A

CVE-2001-0956

speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0955 CWE-? N/A

CVE-2001-0955

Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly thr…

MITRE n/a:n/a 02 Feb 2002