CVE Notifier

CVE-2001-0897 CWE-? N/A

CVE-2001-0897

Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0893 CWE-? N/A

CVE-2001-0893

Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.

MITRE n/a:n/a 02 Feb 2002

CVE-2001-0892 CWE-? N/A

CVE-2001-0892

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.

MITRE n/a:n/a 02 Feb 2002

CVE-2002-0010 CWE-? N/A

CVE-2002-0010

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.…

MITRE n/a:n/a 10 Jan 2002

CVE-2002-0008 CWE-? N/A

CVE-2002-0008

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modi…

MITRE n/a:n/a 10 Jan 2002

CVE-2002-0001 CWE-? N/A

CVE-2002-0001

Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.

MITRE n/a:n/a 03 Jan 2002

CVE-2001-0871 CWE-? N/A

CVE-2001-0871

Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, o…

MITRE n/a:n/a 30 Nov 2001

CVE-2001-0870 CWE-? N/A

CVE-2001-0870

HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive informat…

MITRE n/a:n/a 30 Nov 2001

CVE-2001-0868 CWE-? N/A

CVE-2001-0868

Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.

MITRE n/a:n/a 28 Nov 2001

CVE-2001-0858 CWE-? N/A

CVE-2001-0858

Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0856 CWE-? N/A

CVE-2001-0856

Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES expor…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0855 CWE-? N/A

CVE-2001-0855

Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.

MITRE n/a:n/a 22 Nov 2001