CVEs published in October 2001

142 vulnerabilities, 6 critical, 0 exploited.

• apache http server split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in... CVE-2001-0730 EPSS 11.9% 5.0 MediumOctober 30, 2001
• compaq management agents Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management... CVE-2001-0728 4.6 MediumOctober 30, 2001
• microsoft excel, powerpoint +1 more Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and... CVE-2001-0718 EPSS 11.1% 7.5 HighOctober 30, 2001
• tooltalk database server Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers... CVE-2001-0717 10.0 HighOctober 30, 2001
• microsoft internet explorer Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0,... CVE-2001-0667 EPSS 14.7% 7.5 HighOctober 30, 2001
• microsoft exchange server Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a... CVE-2001-0666 2.1 LowOctober 30, 2001
• microsoft ie Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be... CVE-2001-0665 EPSS 12.1% 7.5 HighOctober 30, 2001
• microsoft internet explorer Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via... CVE-2001-0664 Public exploit EPSS 18.2% 7.5 HighOctober 30, 2001
• microsoft windows nt RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss... CVE-2001-0662 EPSS 22.6% 5.0 MediumOctober 30, 2001
• microsoft exchange server Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to... CVE-2001-0660 EPSS 22.0% 5.0 MediumOctober 30, 2001
• sun sunos Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a... CVE-2001-0652 Public exploit 7.2 HighOctober 30, 2001
• microsoft internet information server IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash)... CVE-2001-0545 EPSS 18.3% 5.0 MediumOctober 30, 2001
• microsoft internet information services IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that... CVE-2001-0544 2.1 LowOctober 30, 2001
• microsoft terminal server Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a... CVE-2001-0540 EPSS 71.2% 5.0 MediumOctober 30, 2001
• redhat package manager RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via... CVE-2001-0923 7.2 HighOctober 25, 2001
• rsa securid WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000... CVE-2001-1462 7.5 HighOctober 24, 2001
• rsa securid Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for... CVE-2001-1461 7.5 HighOctober 22, 2001
• handspring visor, palm os +1 more Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote... CVE-2001-1438 5.0 MediumOctober 22, 2001
• linux kernel ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root... CVE-2001-1384 Public exploit 7.2 HighOctober 18, 2001
• openbsd openssh OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh... CVE-2001-1380 7.5 HighOctober 18, 2001
• linux kernel Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial... CVE-2001-0907 Public exploit 2.1 LowOctober 18, 2001
• procmail Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local... CVE-2001-0905 6.2 MediumOctober 18, 2001
• xchat Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via... CVE-2001-0792 7.5 HighOctober 18, 2001
• redhat linux LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when... CVE-2001-0787 Public exploit 4.6 MediumOctober 18, 2001
• icecast Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read... CVE-2001-0784 Public exploit 5.0 MediumOctober 18, 2001
• sun solaris, sunos +1 more Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote... CVE-2001-0779 Public exploit EPSS 62.2% 10.0 HighOctober 18, 2001
• tripwire Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain... CVE-2001-0774 4.6 MediumOctober 18, 2001
• cayman 3220-h dsl router Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a... CVE-2001-0773 5.0 MediumOctober 18, 2001
• steve poulsen guildftpd Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a... CVE-2001-0770 7.5 HighOctober 18, 2001
• steve poulsen guildftpd Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a... CVE-2001-0769 5.0 MediumOctober 18, 2001
• bisonware bison ftp server BisonFTP V4R1 allows local users to access directories outside of their home directory by... CVE-2001-0765 4.6 MediumOctober 18, 2001
• juergen schoenwaelder scotty Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long... CVE-2001-0764 Public exploit 7.2 HighOctober 18, 2001
• debian linux Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute... CVE-2001-0763 Public exploit EPSS 17.2% 7.5 HighOctober 18, 2001
• citrix nfuse Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a... CVE-2001-0760 Public exploit 5.0 MediumOctober 18, 2001
• cisco 6400 nrp 2 Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly... CVE-2001-0757 7.5 HighOctober 18, 2001
• cisco cbos Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of... CVE-2001-0754 5.0 MediumOctober 18, 2001
• cisco cbos Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP... CVE-2001-0752 5.0 MediumOctober 18, 2001
• cisco cbos Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence... CVE-2001-0751 Public exploit 7.5 HighOctober 18, 2001
• cisco ios Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a... CVE-2001-0750 5.0 MediumOctober 18, 2001
• acme labs server Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote... CVE-2001-0748 Public exploit 5.0 MediumOctober 18, 2001
• netscape messanger Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login,... CVE-2001-0745 5.0 MediumOctober 18, 2001
• cisco hsrp Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by... CVE-2001-0741 Public exploit 2.1 LowOctober 18, 2001
• 3com 3c840-us, 3cp4144 +1 more 3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier,... CVE-2001-0740 Public exploit 5.0 MediumOctober 18, 2001
• engardelinux secure linux Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some... CVE-2001-0739 7.2 HighOctober 18, 2001
• debian linux, immunix +1 more LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to... CVE-2001-0738 5.0 MediumOctober 18, 2001
• ralf s. engelschall eperl The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to... CVE-2001-0733 7.5 HighOctober 18, 2001
• apple mac os x NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by... CVE-2001-1447 7.2 HighOctober 17, 2001
• snes9x.com snes9x Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root... CVE-2001-1015 Public exploit 7.2 HighOctober 16, 2001
• novell groupwise Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read... CVE-2001-1458 5.0 MediumOctober 15, 2001
• trend micro officescan, virus buster +1 more Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to... CVE-2001-1151 5.0 MediumOctober 15, 2001
• Show olderLoading…