CVE Notifier

CVE-2001-0496 CWE-? N/A

CVE-2001-0496

kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.

MITRE n/a:n/a 24 May 2001

CVE-2001-0492 CWE-? N/A

CVE-2001-0492

Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.

MITRE n/a:n/a 24 May 2001

CVE-2001-0491 CWE-? N/A

CVE-2001-0491

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.

MITRE n/a:n/a 24 May 2001

CVE-2001-0490 CWE-? N/A

CVE-2001-0490

Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.

MITRE n/a:n/a 24 May 2001

CVE-2001-0484 CWE-? N/A

CVE-2001-0484

Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a d…

MITRE n/a:n/a 24 May 2001

CVE-2001-0483 CWE-? N/A

CVE-2001-0483

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.

MITRE n/a:n/a 24 May 2001

CVE-2001-0480 CWE-? N/A

CVE-2001-0480

Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands.

MITRE n/a:n/a 24 May 2001

CVE-2001-0479 CWE-? N/A

CVE-2001-0479

Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.

MITRE n/a:n/a 24 May 2001

CVE-2001-0478 CWE-? N/A

CVE-2001-0478

Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.

MITRE n/a:n/a 24 May 2001

CVE-2001-0477 CWE-? N/A

CVE-2001-0477

Vulnerability in WebCalendar 0.9.26 allows remote command execution.

MITRE n/a:n/a 24 May 2001

CVE-2001-0476 CWE-? N/A

CVE-2001-0476

Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.

MITRE n/a:n/a 24 May 2001

CVE-2001-0472 CWE-? N/A

CVE-2001-0472

Hursley Software Laboratories Consumer Transaction Framework (HSLCTF) HTTP object allows remote attackers to cause a denial of service (crash) via an extremely long HTTP request.

MITRE n/a:n/a 24 May 2001