CVE Notifier

CVE-2001-0953 CWE-? N/A

CVE-2001-0953

Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0952 CWE-? N/A

CVE-2001-0952

THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0950 CWE-? N/A

CVE-2001-0950

ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or ke…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0949 CWE-? N/A

CVE-2001-0949

Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0948 CWE-? N/A

CVE-2001-0948

Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in t…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0947 CWE-? N/A

CVE-2001-0947

Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error p…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0945 CWE-? N/A

CVE-2001-0945

Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0944 CWE-? N/A

CVE-2001-0944

DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0943 CWE-? N/A

CVE-2001-0943

dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying th…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0942 CWE-? N/A

CVE-2001-0942

dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate direct…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0941 CWE-? N/A

CVE-2001-0941

Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0938 CWE-? N/A

CVE-2001-0938

Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (…

MITRE n/a:n/a 02 Feb 2002