CVE Notifier

CVE-2001-0523 CWE-? N/A

CVE-2001-0523

eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted v…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0521 CWE-? N/A

CVE-2001-0521

Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0520 CWE-? N/A

CVE-2001-0520

Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0519 CWE-? N/A

CVE-2001-0519

Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0516 CWE-? N/A

CVE-2001-0516

Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected o…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0515 CWE-? N/A

CVE-2001-0515

Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0499 CWE-? N/A

CVE-2001-0499

Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FI…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0498 CWE-? N/A

CVE-2001-0498

Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header exten…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0357 CWE-? N/A

CVE-2001-0357

FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0352 CWE-? N/A

CVE-2001-0352

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0350 CWE-? N/A

CVE-2001-0350

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable nam…

MITRE n/a:n/a 27 Jul 2001

CVE-2001-0349 CWE-? N/A

CVE-2001-0349

Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable nam…

MITRE n/a:n/a 27 Jul 2001