CVE Notifier

CVE-2001-0263 CWE-? N/A

CVE-2001-0263

Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.

MITRE n/a:n/a 24 May 2001

CVE-2001-0262 CWE-? N/A

CVE-2001-0262

Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.

MITRE n/a:n/a 24 May 2001

CVE-2001-0249 CWE-? N/A

CVE-2001-0249

Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.

MITRE n/a:n/a 24 May 2001

CVE-2001-0248 CWE-? N/A

CVE-2001-0248

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.

MITRE n/a:n/a 24 May 2001

CVE-2001-0247 CWE-? N/A

CVE-2001-0247

Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buf…

MITRE n/a:n/a 24 May 2001

CVE-2001-0246 CWE-? N/A

CVE-2001-0246

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local fra…

MITRE n/a:n/a 24 May 2001

CVE-2001-0242 CWE-? N/A

CVE-2001-0242

Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Ov…

MITRE n/a:n/a 24 May 2001

CVE-2001-0326 CWE-? N/A

CVE-2001-0326

Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configu…

MITRE n/a:n/a 07 May 2001

CVE-2001-0319 CWE-? N/A

CVE-2001-0319

orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.

MITRE n/a:n/a 07 May 2001

CVE-2001-0318 CWE-? N/A

CVE-2001-0318

Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd).

MITRE n/a:n/a 07 May 2001

CVE-2001-0317 CWE-? N/A

CVE-2001-0317

Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process.

MITRE n/a:n/a 07 May 2001

CVE-2001-0316 CWE-? N/A

CVE-2001-0316

Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.

MITRE n/a:n/a 07 May 2001