CVEs published in September 2001
119 vulnerabilities, 3 critical, 0 exploited.
- microsoft internet information servicesVulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a...5.0 Medium
- microsoft internet information servicesIIS 5.0 uses relative paths to find system files that will run in-process, which allows local...7.2 High
- microsoft internet information server, internet information services +1 moreBuffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via...7.2 High
- ibm websphere application server, websphere commerce suite +1 moreIBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies,...7.5 High
- ibm lotus dominoThe default configuration of Lotus Domino server 5.0.8 includes system information (version,...5.0 Medium
- aladdin enterprises ghostscriptghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via...2.6 Low
- john e. davis mostBuffer overflow in tab expansion capability of the most program allows local or remote attackers...10.0 High
- michael boehme webdiscount e shop online shop systemeshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell...7.5 High
- broadcom arcserve backup, arcserve backup 2000 +1 moreComputer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user...10.0 High
- broadcom arcserve backup, arcserve backup 2000 +1 moreComputer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named...6.4 Medium
- microsoft index serverSQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive...5.0 Medium
- hp hp-uxThe libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.2.1 Low
- counterpane password safePassword Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the...4.6 Medium
- khamil landross and zack jones eftpBuffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading...7.5 High
- khamil landross and zack jones eftpEFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.4.6 Medium
- khamil landross and zack jones eftpEFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on...5.0 Medium
- khamil landross and zack jones eftpDirectory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal...7.5 High
- dell bsafe ssl-j, cisco icdn +1 moreRSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed...7.5 High
- redhat linuxApache on Red Hat Linux with with the UserDir directive enabled generates different error codes...5.0 Medium
- microsoft outlook expressOutlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags...7.5 High
- trend micro interscan viruswall, interscan emanager +1 moreBuffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J...7.5 High
- ipswitch imailBuffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier...5.0 Medium
- celtech software expressfsBuffer overflow in Celtech ExpressFS FTP server 2.x allows remote attackers to cause a denial of...7.5 High
- microsoft zero administration kitZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting...4.6 Medium
- arpanet perlshopperlshop.cgi shopping cart program stores sensitive customer information in directories and files...5.0 Medium
- fore powerhub softwareFORE PowerHub before 5.0.1 allows remote attackers to cause a denial of service (hang) via a TCP...5.0 Medium
- iomega zip 100 mb driveZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass...4.6 Medium
- rtin, tin +1 moreUNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow...5.0 Medium
- novell web serverVulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers...5.0 Medium
- lbl tcpdumpip_print procedure in Tcpdump 3.4a allows remote attackers to cause a denial of service via a...7.5 High
- apple mac os xFind-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named ...7.5 High
- crosstec corporation netop schoolNetOp School 1.5 allows local users to bypass access restrictions on the administration version...4.6 Medium
- textor webmasters ltd. listrec.plTextor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary...7.5 High
- speechio speechdspeechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers...7.2 High
- mozilla bugzillaBugzilla before 2.14 allows Bugzilla users to bypass group security checks by marking a bug as...7.5 High
- mozilla bugzillaprocess_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved...2.1 Low
- mozilla bugzillaBugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to...2.1 Low
- mozilla bugzillaBugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email...7.5 High
- mozilla bugzillaBugzilla before 2.14 includes the username and password in URLs, which could allow attackers to...7.5 High
- mozilla bugzillaBugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote...7.5 High
- mozilla bugzillaBugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow...7.5 High
- leon j breedt pam-pgsqlLeon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and...7.5 High
- compaq tru64Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute...7.2 High
- compaq tru64msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary...2.1 Low
- alessandro gardich nss postgresqlnss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by...7.5 High
- joerg wendland libnss-pgsql, alessandro gardich nss postgresql +1 morelibnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL...7.5 High
- checkpoint firewall-1Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary...6.2 Medium
- checkpoint firewall-1The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does...6.4 Medium
- seaglass technologies inc. sglmerchantDirectory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote...5.0 Medium
- hassan consulting shopping cartshop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary...7.5 High
- Show moreLoading…