CVE Notifier

CVE-2001-0179 CWE-? N/A

CVE-2001-0179

Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."

MITRE n/a:n/a 07 May 2001

CVE-2001-0178 CWE-? N/A

CVE-2001-0178

kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.

MITRE n/a:n/a 07 May 2001

CVE-2001-0170 CWE-? N/A

CVE-2001-0170

glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.

MITRE n/a:n/a 07 May 2001

CVE-2001-0169 CWE-? N/A

CVE-2001-0169

When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary …

MITRE n/a:n/a 07 May 2001

CVE-2001-0166 CWE-? N/A

CVE-2001-0166

Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.

MITRE n/a:n/a 07 May 2001

CVE-2001-0165 CWE-? N/A

CVE-2001-0165

Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.

MITRE n/a:n/a 07 May 2001

CVE-2001-0157 CWE-? N/A

CVE-2001-0157

Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabl…

MITRE n/a:n/a 07 May 2001

CVE-2001-0154 CWE-? N/A

CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly.

MITRE n/a:n/a 07 May 2001

CVE-2001-0153 CWE-? N/A

CVE-2001-0153

Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.

MITRE n/a:n/a 07 May 2001

CVE-2001-0152 CWE-? N/A

CVE-2001-0152

The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed fo…

MITRE n/a:n/a 07 May 2001

CVE-2001-0151 CWE-? N/A

CVE-2001-0151

IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.

MITRE n/a:n/a 07 May 2001

CVE-2001-0150 CWE-? N/A

CVE-2001-0150

Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the T…

MITRE n/a:n/a 07 May 2001