CVEs published in December 2001

222 vulnerabilities, 16 critical, 0 exploited.

• openbsd openssh SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1... CVE-2001-1585 6.8 MediumDecember 31, 2001
• michael barretto cardboard CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary... CVE-2001-1584 7.5 HighDecember 31, 2001
• sun sunos lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary... CVE-2001-1583 Public exploit EPSS 83.4% 10.0 HighDecember 31, 2001
• sun solaris, sunos +1 more Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local... CVE-2001-1582 Public exploit 7.2 HighDecember 31, 2001
• clearswift limited mailsweeper The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass... CVE-2001-1581 7.5 HighDecember 31, 2001
• novell netware, nombas scriptease webserver +1 more Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3... CVE-2001-1580 5.0 MediumDecember 31, 2001
• sco unixware, open unix +1 more The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain... CVE-2001-1579 5.0 MediumDecember 31, 2001
• sco openserver Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical... CVE-2001-1578 2.1 LowDecember 31, 2001
• caldera openunix, unixware +1 more Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to... CVE-2001-1577 7.5 HighDecember 31, 2001
• caldera unixware Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a... CVE-2001-1576 4.6 MediumDecember 31, 2001
• apple personal web sharing Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled,... CVE-2001-1575 5.0 MediumDecember 31, 2001
• trend micro interscan viruswall Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall... CVE-2001-1574 10.0 HighDecember 31, 2001
• trend micro interscan viruswall Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has... CVE-2001-1573 10.0 HighDecember 31, 2001
• linux kernel The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based... CVE-2001-1572 7.5 HighDecember 31, 2001
• microsoft windows xp The Remote Desktop client in Windows XP sends the most recent user account name in cleartext,... CVE-2001-1571 EPSS 13.1% 5.0 MediumDecember 31, 2001
• microsoft windows xp Windows XP with fast user switching and account lockout enabled allows local users to deny user... CVE-2001-1570 2.1 LowDecember 31, 2001
• cmg openwave wap gateway Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates... CVE-2001-1569 6.4 MediumDecember 31, 2001
• cmg wap gateway CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from... CVE-2001-1568 6.4 MediumDecember 31, 2001
• ibm lotus domino, lotus domino server +1 more Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions... CVE-2001-1567 5.0 MediumDecember 31, 2001
• vanessa logger, verge perdition +1 more Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers... CVE-2001-1566 Fix available 7.5 HighDecember 31, 2001
• apple mac os x Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the... CVE-2001-1565 2.1 LowDecember 31, 2001
• hp hp-ux setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce... CVE-2001-1564 2.1 LowDecember 31, 2001
• apache tomcat, hp secure os +1 more Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to... CVE-2001-1563 7.5 HighDecember 31, 2001
• bsd nvi Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format... CVE-2001-1562 Fix available 7.2 HighDecember 31, 2001
• debian linux, john bovey xvt +1 more Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via... CVE-2001-1561 Public exploit 7.2 HighDecember 31, 2001
• microsoft windows 2000, windows xp +1 more Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to... CVE-2001-1560 Public exploit 2.1 LowDecember 31, 2001
• openbsd The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead... CVE-2001-1559 Public exploit 5.5 MediumDecember 31, 2001
• snort Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause... CVE-2001-1558 5.0 MediumDecember 31, 2001
• ibm aix Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges. CVE-2001-1557 7.5 HighDecember 31, 2001
• apache http server The log files in Apache web server contain information directly supplied by clients and does not... CVE-2001-1556 5.0 MediumDecember 31, 2001
• sun solaris, sunos +1 more pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of... CVE-2001-1555 4.6 MediumDecember 31, 2001
• ibm aix IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial... CVE-2001-1554 5.0 MediumDecember 31, 2001
• university of california seti at home Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to... CVE-2001-1553 4.6 MediumDecember 31, 2001
• microsoft windows me ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending... CVE-2001-1552 EPSS 13.9% 5.0 MediumDecember 31, 2001
• linux kernel Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to... CVE-2001-1551 2.1 LowDecember 31, 2001
• centra asp, centraone, smart connect +2 more CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64... CVE-2001-1550 2.1 LowDecember 31, 2001
• tiny software personal firewall Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP... CVE-2001-1549 Public exploit 2.1 LowDecember 31, 2001
• zonelabs zonealarm ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering... CVE-2001-1548 2.1 LowDecember 31, 2001
• microsoft outlook express Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially... CVE-2001-1547 EPSS 13.7% 7.5 HighDecember 31, 2001
• mckesson pathways homecare Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users... CVE-2001-1546 Public exploit 7.8 HighDecember 31, 2001
• macromedia jrun Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client... CVE-2001-1545 5.0 MediumDecember 31, 2001
• macromedia jrun Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows... CVE-2001-1544 5.0 MediumDecember 31, 2001
• axis 2100 network camera, 2110 network camera, 2120 network camera +2 more +4 more Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password ... CVE-2001-1543 7.5 HighDecember 31, 2001
• network associates webshield smtp NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email... CVE-2001-1542 7.5 HighDecember 31, 2001
• bsdi bsd os Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local... CVE-2001-1541 7.2 HighDecember 31, 2001
• david f. mischler iproute IPRoute 0.973, 0.974 and 1.18 allows remote attackers to cause a denial of service via fragmented... CVE-2001-1540 5.0 MediumDecember 31, 2001
• microsoft internet explorer Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in... CVE-2001-1539 EPSS 13.9% 5.0 MediumDecember 31, 2001
• speedxess ha-120 dsl router SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows... CVE-2001-1538 7.5 HighDecember 31, 2001
• symfony twig The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores... CVE-2001-1537 7.5 HighDecember 31, 2001
• audiogalaxy Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for... CVE-2001-1536 7.5 HighDecember 31, 2001
• Show olderLoading…