CVE Notifier

CVE-2001-0923 CWE-? N/A

CVE-2001-0923

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0922 CWE-? N/A

CVE-2001-0922

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, …

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0919 CWE-? N/A

CVE-2001-0919

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0916 CWE-? N/A

CVE-2001-0916

Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0915 CWE-? N/A

CVE-2001-0915

Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0913 CWE-? N/A

CVE-2001-0913

Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format spe…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0911 CWE-? N/A

CVE-2001-0911

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0910 CWE-? N/A

CVE-2001-0910

Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP add…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0908 CWE-? N/A

CVE-2001-0908

CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Addres…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0904 CWE-? N/A

CVE-2001-0904

Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more ea…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0903 CWE-? N/A

CVE-2001-0903

Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by comp…

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0898 CWE-? N/A

CVE-2001-0898

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been o…

MITRE n/a:n/a 02 Feb 2002