CVEs published in August 2001

177 vulnerabilities, 20 critical, 0 exploited.

• microsoft windows 2000, windows nt +1 more By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received... CVE-2001-1452 7.5 HighAugust 31, 2001
• webridge px application suite Webridge PX Application Suite allows remote attackers to obtain sensitive information via a... CVE-2001-1073 5.0 MediumAugust 31, 2001
• apache http server Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass... CVE-2001-1072 5.0 MediumAugust 31, 2001
• sage software mas 200 Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port... CVE-2001-1070 2.1 LowAugust 31, 2001
• adobe acrobat reader libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file... CVE-2001-1069 7.2 HighAugust 31, 2001
• qualcomm qpopper qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages... CVE-2001-1068 5.0 MediumAugust 31, 2001
• aol server Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and... CVE-2001-1067 Public exploit EPSS 16.1% 10.0 HighAugust 31, 2001
• sun solaris ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1... CVE-2001-1066 2.1 LowAugust 31, 2001
• cisco cbos Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap... CVE-2001-1065 5.0 MediumAugust 31, 2001
• cisco cbos Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a... CVE-2001-1064 Public exploit 5.0 MediumAugust 31, 2001
• caldera unixware, openunix +1 more Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain... CVE-2001-1063 7.2 HighAugust 31, 2001
• caldera openserver Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary... CVE-2001-1062 7.2 HighAugust 31, 2001
• ibm aix Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. CVE-2001-1061 10.0 HighAugust 31, 2001
• oracle database server oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files... CVE-2001-1041 2.1 LowAugust 31, 2001
• hp jetadmin HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is... CVE-2001-1040 6.4 MediumAugust 31, 2001
• hp jetadmin The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when... CVE-2001-1039 7.5 HighAugust 31, 2001
• gnu findutils, slackware linux +1 more GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an... CVE-2001-1036 Public exploit 7.2 HighAugust 31, 2001
• windowmaker Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute... CVE-2001-1027 10.0 HighAugust 31, 2001
• francisco burzi php-nuke PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix... CVE-2001-1025 10.0 HighAugust 31, 2001
• fetchmail Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP... CVE-2001-1009 Public exploit 10.0 HighAugust 31, 2001
• sun jre, java plug-in +1 more Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which... CVE-2001-1008 7.5 HighAugust 31, 2001
• starfish truesync desktop Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys... CVE-2001-1007 5.0 MediumAugust 31, 2001
• starfish truesync desktop Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and... CVE-2001-1006 5.0 MediumAugust 31, 2001
• starfish truesync desktop Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user... CVE-2001-1005 7.5 HighAugust 31, 2001
• gnutella client Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote... CVE-2001-1004 5.0 MediumAugust 31, 2001
• webct respondus Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows... CVE-2001-1003 Public exploit 4.6 MediumAugust 31, 2001
• redhat linux The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does... CVE-2001-1002 Public exploit 7.5 HighAugust 31, 2001
• phpprojekt PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by... CVE-2001-0995 7.5 HighAugust 31, 2001
• ultraedit ultraedit-32 UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows... CVE-2001-0983 Public exploit 4.6 MediumAugust 31, 2001
• hp cifs-9000 server HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled... CVE-2001-0981 10.0 HighAugust 31, 2001
• hp process resource manager Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX... CVE-2001-0976 7.2 HighAugust 31, 2001
• fraunhofer fit bscw BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary... CVE-2001-0973 6.4 MediumAugust 31, 2001
• surf-net asp forum Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows... CVE-2001-0972 10.0 HighAugust 31, 2001
• aci 4d webserver Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary... CVE-2001-0971 5.0 MediumAugust 31, 2001
• tdavid td forum Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote... CVE-2001-0970 7.5 HighAugust 31, 2001
• freebsd ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point... CVE-2001-0969 10.0 HighAugust 31, 2001
• knox software arkeia Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password... CVE-2001-0968 10.0 HighAugust 31, 2001
• arkeia Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting... CVE-2001-0967 9.8 CriticalAugust 31, 2001
• nudester.org nudester Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or... CVE-2001-0966 10.0 HighAugust 31, 2001
• glftpd glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST... CVE-2001-0965 Public exploit 5.0 MediumAugust 31, 2001
• oracle database server dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable... CVE-2001-0943 7.2 HighAugust 31, 2001
• cisco ios Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the... CVE-2001-0711 Public exploit 5.0 MediumAugust 31, 2001
• ibm http server ssl module common ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own... CVE-2000-1202 7.2 HighAugust 31, 2001
• checkpoint firewall-1 Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a... CVE-2000-1201 5.0 MediumAugust 31, 2001
• microsoft windows nt Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with... CVE-2000-1200 EPSS 48.1% 5.0 MediumAugust 31, 2001
• postgresql PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which... CVE-2000-1199 Public exploit 4.6 MediumAugust 31, 2001
• qualcomm qpopper qpopper POP server creates lock files with predictable names, which allows local users to cause a... CVE-2000-1198 Public exploit 5.5 MediumAugust 31, 2001
• university of washington imap POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems... CVE-2000-1197 2.1 LowAugust 31, 2001
• netscape publishingxpert PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read... CVE-2000-1196 Public exploit 5.0 MediumAugust 31, 2001
• caldera openlinux edesktop, openlinux eserver +1 more telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote... CVE-2000-1195 7.5 HighAugust 31, 2001
• Show olderLoading…