CVEs published in January 2001

74 vulnerabilities, 2 critical, 0 exploited.

• att winvnc WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which... CVE-2001-1422 7.5 HighJanuary 23, 2001
• oracle mysql Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and... CVE-2001-1274 Public exploit 7.5 HighJanuary 23, 2001
• oracle mysql MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain... CVE-2001-1275 7.2 HighJanuary 19, 2001
• ssh SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it... CVE-2001-1476 7.5 HighJanuary 18, 2001
• ssh SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay... CVE-2001-1475 7.5 HighJanuary 18, 2001
• ssh SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote... CVE-2001-1474 5.0 MediumJanuary 18, 2001
• ssh The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client... CVE-2001-1473 7.5 HighJanuary 18, 2001
• ssh The IDEA cipher as implemented by SSH1 does not protect the final block of a message against... CVE-2001-1470 5.0 MediumJanuary 18, 2001
• ssh The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without... CVE-2001-1469 5.0 MediumJanuary 18, 2001
• dallas semiconductor ibutton Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password,... CVE-2001-1436 4.6 MediumJanuary 18, 2001
• aol instant messenger Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions... CVE-2001-1416 5.1 MediumJanuary 18, 2001
• php, mandrakesoft mandrake linux +1 more The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option... CVE-2001-1385 5.0 MediumJanuary 12, 2001
• basilix webmail Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the... CVE-2001-1044 Public exploit 7.5 HighJanuary 11, 2001
• businessobjects crystal reports Crystal Reports, when displaying data for a password protected database using HTML pages, embeds... CVE-2001-1464 7.5 HighJanuary 10, 2001
• redhat linux Buffer overflow in pam_localuser PAM module in Red Hat Linux 7.x and 6.x allows attackers to gain... CVE-2000-1189 7.2 HighJanuary 9, 2001
• netscape communicator, navigator +1 more Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to... CVE-2000-1187 7.5 HighJanuary 9, 2001
• freebsd telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers... CVE-2000-1184 5.0 MediumJanuary 9, 2001
• watchguard firebox ii WatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the... CVE-2000-1182 5.0 MediumJanuary 9, 2001
• realnetworks realserver Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's... CVE-2000-1181 Public exploit 5.0 MediumJanuary 9, 2001
• oracle oracle8i Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to... CVE-2000-1180 Public exploit 4.6 MediumJanuary 9, 2001
• netopia 650-st isdn router Netopia ISDN Router 650-ST before 4.3.5 allows remote attackers to read system logs without... CVE-2000-1179 5.0 MediumJanuary 9, 2001
• joseph allen joe Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an... CVE-2000-1178 5.5 MediumJanuary 9, 2001
• ethereal group ethereal Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote... CVE-2000-1174 Public exploit 7.5 HighJanuary 9, 2001
• markus triska cgiforum Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers... CVE-2000-1171 Public exploit 5.0 MediumJanuary 9, 2001
• pelesoft netsnap Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute... CVE-2000-1170 7.5 HighJanuary 9, 2001
• openbsd openssh OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could... CVE-2000-1169 7.5 HighJanuary 9, 2001
• freebsd ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the ... CVE-2000-1167 7.5 HighJanuary 9, 2001
• twig development team twig Twig webmail system does not properly set the "vhosts" variable if it is not configured on the... CVE-2000-1166 7.5 HighJanuary 9, 2001
• balabit syslog-ng Balabit syslog-ng allows remote attackers to cause a denial of service (application crash) via a... CVE-2000-1165 5.0 MediumJanuary 9, 2001
• att winvnc WinVNC installs the WinVNC3 registry key with permissions that give Special Access (read and... CVE-2000-1164 9.0 HighJanuary 9, 2001
• aladdin enterprises ghostscript ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in... CVE-2000-1163 4.6 MediumJanuary 9, 2001
• aladdin enterprises ghostscript ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink... CVE-2000-1162 3.7 LowJanuary 9, 2001
• microsoft windows nt Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to... CVE-2000-1149 EPSS 16.1% 7.5 HighJanuary 9, 2001
• volano llc volanochatpro The installation of VolanoChatPro chat server sets world-readable permissions for its... CVE-2000-1148 4.6 MediumJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 allows attackers to cause a denial of service via a sequence of commands... CVE-2000-1146 2.1 LowJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 allows attackers who have gained root access to use utilities such as crash... CVE-2000-1145 4.6 MediumJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the... CVE-2000-1144 Public exploit 2.1 LowJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows... CVE-2000-1143 2.1 LowJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 generates an error when an attacker cd's to /proc/self/cwd and executes the... CVE-2000-1142 2.1 LowJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which... CVE-2000-1141 2.1 LowJanuary 9, 2001
• recourse technologies mantrap Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers... CVE-2000-1140 Public exploit 2.1 LowJanuary 9, 2001
• microsoft exchange server The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known... CVE-2000-1139 7.5 HighJanuary 9, 2001
• gnu ed GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink... CVE-2000-1137 4.6 MediumJanuary 9, 2001
• debian elvis tiny elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows... CVE-2000-1136 4.6 MediumJanuary 9, 2001
• debian linux fshd (fsh daemon) in Debian GNU/Linux allows local users to overwrite files of other users via a... CVE-2000-1135 4.6 MediumJanuary 9, 2001
• dcscripts dcforum DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the... CVE-2000-1132 Public exploit 6.4 MediumJanuary 9, 2001
• bill kendrick gbook.cgi Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands... CVE-2000-1131 7.5 HighJanuary 9, 2001
• ibm aix Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long... CVE-2000-1124 Public exploit 7.2 HighJanuary 9, 2001
• ibm aix Buffer overflow in pioout command in IBM AIX 4.3.x and earlier may allow local users to execute... CVE-2000-1123 7.2 HighJanuary 9, 2001
• ibm aix Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute... CVE-2000-1122 7.2 HighJanuary 9, 2001
• Show olderLoading…