CVE Notifier

CVE-2001-0854 CWE-? N/A

CVE-2001-0854

PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is be…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0853 CWE-? N/A

CVE-2001-0853

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0849 CWE-? N/A

CVE-2001-0849

viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0848 CWE-? N/A

CVE-2001-0848

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0847 CWE-? N/A

CVE-2001-0847

Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0845 CWE-? N/A

CVE-2001-0845

Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0844 CWE-? N/A

CVE-2001-0844

Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0842 CWE-? N/A

CVE-2001-0842

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0841 CWE-? N/A

CVE-2001-0841

Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0840 CWE-? N/A

CVE-2001-0840

Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0839 CWE-? N/A

CVE-2001-0839

ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guess…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0838 CWE-? N/A

CVE-2001-0838

Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.

MITRE n/a:n/a 22 Nov 2001