CVE Notifier

CVE-2001-0450 CWE-? N/A

CVE-2001-0450

Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.

MITRE n/a:n/a 24 May 2001

CVE-2001-0448 CWE-? N/A

CVE-2001-0448

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.

MITRE n/a:n/a 24 May 2001

CVE-2001-0447 CWE-? N/A

CVE-2001-0447

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.

MITRE n/a:n/a 24 May 2001

CVE-2001-0446 CWE-? N/A

CVE-2001-0446

IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL.

MITRE n/a:n/a 24 May 2001

CVE-2001-0443 CWE-? N/A

CVE-2001-0443

Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (1) a long username, or (2) a long password.

MITRE n/a:n/a 24 May 2001

CVE-2001-0441 CWE-? N/A

CVE-2001-0441

Buffer overflow in (1) wrapping and (2) unwrapping functions of slrn news reader before 0.9.7.0 allows remote attackers to execute arbitrary commands via a long message header.

MITRE n/a:n/a 24 May 2001

CVE-2001-0438 CWE-? N/A

CVE-2001-0438

Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu.

MITRE n/a:n/a 24 May 2001

CVE-2001-0437 CWE-? N/A

CVE-2001-0437

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

MITRE n/a:n/a 24 May 2001

CVE-2001-0436 CWE-? N/A

CVE-2001-0436

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.

MITRE n/a:n/a 24 May 2001

CVE-2001-0435 CWE-? N/A

CVE-2001-0435

The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they a…

MITRE n/a:n/a 24 May 2001

CVE-2001-0433 CWE-? N/A

CVE-2001-0433

Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.

MITRE n/a:n/a 24 May 2001

CVE-2001-0432 CWE-? N/A

CVE-2001-0432

Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands.

MITRE n/a:n/a 24 May 2001