CVE Notifier

CVE-2001-0835 CWE-? N/A

CVE-2001-0835

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information,…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0832 CWE-? N/A

CVE-2001-0832

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an altern…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0831 CWE-? N/A

CVE-2001-0831

Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0829 CWE-? N/A

CVE-2001-0829

A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0827 CWE-? N/A

CVE-2001-0827

Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of "PASV" requests.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0826 CWE-? N/A

CVE-2001-0826

Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0824 CWE-? N/A

CVE-2001-0824

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ …

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0821 CWE-? N/A

CVE-2001-0821

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.t…

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0820 CWE-? N/A

CVE-2001-0820

Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0818 CWE-? N/A

CVE-2001-0818

A buffer overflow the '\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0817 CWE-? N/A

CVE-2001-0817

Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.

MITRE n/a:n/a 22 Nov 2001

CVE-2001-0809 CWE-? N/A

CVE-2001-0809

Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources.

MITRE n/a:n/a 22 Nov 2001