CVEs published in November 2001

94 vulnerabilities, 6 critical, 0 exploited.

• oracle database server Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary... CVE-2001-0941 Public exploit 4.6 MediumNovember 30, 2001
• lotus domino Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a... CVE-2001-0939 5.0 MediumNovember 30, 2001
• persits aspupload Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote... CVE-2001-0938 6.4 MediumNovember 30, 2001
• matt wright pgpmail.pl PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in... CVE-2001-0937 7.5 HighNovember 30, 2001
• frox Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method... CVE-2001-0936 7.5 HighNovember 30, 2001
• mandrakesoft mandrake linux Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries... CVE-2001-0912 7.2 HighNovember 30, 2001
• sco openserver Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port... CVE-2001-0896 5.0 MediumNovember 30, 2001
• alchemy lab eye, dek software alchemy network monitor +1 more Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor... CVE-2001-0871 7.5 HighNovember 30, 2001
• alchemy lab eye, dek software alchemy network monitor +1 more HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without... CVE-2001-0870 5.0 MediumNovember 30, 2001
• washington university wu-ftpd, david madore ftpd-bsd +1 more wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to... CVE-2001-0550 Public exploit EPSS 74.1% 7.5 HighNovember 30, 2001
• oracle database server dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute... CVE-2001-0942 4.6 MediumNovember 29, 2001
• mandrakesoft mandrake linux, apache http server, mandrakesoft mandrake linux corporate server +1 more +3 more The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux... CVE-2001-1449 7.5 HighNovember 28, 2001
• washington university wu-ftpd Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob... CVE-2001-0935 7.5 HighNovember 28, 2001
• cooolsoft powerftp Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server... CVE-2001-0934 Public exploit 7.5 HighNovember 28, 2001
• cooolsoft powerftp Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives... CVE-2001-0933 Public exploit 7.5 HighNovember 28, 2001
• cooolsoft powerftp Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of... CVE-2001-0932 Public exploit EPSS 22.6% 7.5 HighNovember 28, 2001
• cooolsoft powerftp Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or... CVE-2001-0931 Public exploit 7.5 HighNovember 28, 2001
• sendpage sendpage.pl Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell... CVE-2001-0930 7.5 HighNovember 28, 2001
• cisco ios Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure... CVE-2001-0929 7.5 HighNovember 28, 2001
• gnome libgtop daemon Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13... CVE-2001-0928 Fix available 7.5 HighNovember 28, 2001
• macromedia jrun SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for... CVE-2001-0926 5.0 MediumNovember 28, 2001
• redhat stronghold Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP... CVE-2001-0868 5.0 MediumNovember 28, 2001
• gnome libgtop daemon Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12... CVE-2001-0927 7.5 HighNovember 27, 2001
• sun netdynamics ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers... CVE-2001-0922 7.5 HighNovember 26, 2001
• patrick schemitz autonice daemon Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to... CVE-2001-0920 6.2 MediumNovember 26, 2001
• microsoft internet explorer Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your... CVE-2001-0919 5.1 MediumNovember 26, 2001
• microsoft internet explorer Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to... CVE-2001-0875 Public exploit EPSS 28.1% 7.5 HighNovember 26, 2001
• namazu Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote... CVE-2001-1350 7.5 HighNovember 25, 2001
• ibm informix web datablade Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote... CVE-2001-0924 Public exploit 5.0 MediumNovember 22, 2001
• suse linux Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute... CVE-2001-0918 5.1 MediumNovember 22, 2001
• apache tomcat Apache Tomcat Reveals Path through Long URL CVE-2001-0917 Fix available 5.0 MediumNovember 22, 2001
• network solutions rwhoisd Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog,... CVE-2001-0913 7.5 HighNovember 22, 2001
• caldera unixware, openunix +1 more Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare... CVE-2001-0858 4.6 MediumNovember 22, 2001
• ibm 4758 Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to... CVE-2001-0856 4.6 MediumNovember 22, 2001
• rational software clearcase Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root... CVE-2001-0855 Public exploit 7.2 HighNovember 22, 2001
• francisco burzi php-nuke PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case... CVE-2001-0854 5.0 MediumNovember 22, 2001
• entrust getaccess Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary... CVE-2001-0853 5.0 MediumNovember 22, 2001
• duncan hall viralator viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute... CVE-2001-0849 7.5 HighNovember 22, 2001
• e-zone media fuse talk join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi... CVE-2001-0848 4.6 MediumNovember 22, 2001
• lotus domino web server Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing... CVE-2001-0847 7.5 HighNovember 22, 2001
• dec openvms, sevms, openvms alpha +1 more +3 more Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX... CVE-2001-0845 4.6 MediumNovember 22, 2001
• seth leonard book of guests, post it +1 more Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary... CVE-2001-0844 7.5 HighNovember 22, 2001
• leoboard lb5000 Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier... CVE-2001-0842 7.5 HighNovember 22, 2001
• ikonboard.com ikonboard Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote... CVE-2001-0841 7.5 HighNovember 22, 2001
• compaq insight manager xe Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute... CVE-2001-0840 10.0 HighNovember 22, 2001
• ibill internet billing company processing plus ibillpm.pl in iBill password management system generates weak passwords based on a client's... CVE-2001-0839 Public exploit 7.5 HighNovember 22, 2001
• network solutions rwhoisd Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute... CVE-2001-0838 Public exploit 7.5 HighNovember 22, 2001
• bradford barrett webalizer Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows... CVE-2001-0835 7.5 HighNovember 22, 2001
• oracle database server Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary... CVE-2001-0832 2.1 LowNovember 22, 2001
• oracle database server Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit... CVE-2001-0831 4.6 MediumNovember 22, 2001
• Show olderLoading…