Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2001
December

CVEs published in December 2001

222 vulnerabilities, 16 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

marcus s. xenakis unix manualmanual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code...CVE-2001-12147.5 HighDecember 15, 2001
hp hp-uxRLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain...CVE-2001-11987.2 HighDecember 15, 2001
novell groupwiseNovell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password...CVE-2001-1195Public exploit7.5 HighDecember 15, 2001
kde kdeutilsklprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink...CVE-2001-11974.6 MediumDecember 14, 2001
zyxel prestige 681, prestige 1600 +1 moreZyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via...CVE-2001-1194Public exploit5.0 MediumDecember 14, 2001
microsoft internet explorerInternet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content...CVE-2001-0727EPSS 31.0%7.5 HighDecember 14, 2001
khamil landross and zack jones eftpDirectory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ...CVE-2001-11935.0 MediumDecember 13, 2001
citrix ica clientCitrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious...CVE-2001-11927.5 HighDecember 13, 2001
ibm websphere application serverIBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas...CVE-2001-11894.6 MediumDecember 13, 2001
microsoft internet explorerInternet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes...CVE-2001-0874EPSS 21.8%5.0 MediumDecember 13, 2001
mandrakesoft mandrake linuxThe default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords,...CVE-2001-11904.6 MediumDecember 12, 2001
hp hp-ux, ibm aix, sco openserver +3 more +5 moreBuffer overflow in login in various System V based operating systems allows remote attackers to...CVE-2001-0797Public exploitEPSS 95.0%10.0 HighDecember 12, 2001
ibm tivoli secureway policy directorWebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of...CVE-2001-11915.0 MediumDecember 11, 2001
brian dorricott mailtomailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e...CVE-2001-1188Public exploit7.5 HighDecember 11, 2001
mutasem abudahab csvform, csvform plus +1 morecsvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the...CVE-2001-11877.5 HighDecember 11, 2001
microsoft internet information servicesMicrosoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a...CVE-2001-1186Public exploitEPSS 34.7%5.0 MediumDecember 11, 2001
saneCertain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such...CVE-2001-08902.1 LowDecember 11, 2001
freebsdSome AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow...CVE-2001-1185Public exploit6.2 MediumDecember 10, 2001
denicomp winsock rshd ntwrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a...CVE-2001-1184Public exploit5.0 MediumDecember 8, 2001
nara vision kebi communityKebi WebMail allows remote attackers to access the administrator menu and gain privileges via the...CVE-2001-095310.0 HighDecember 8, 2001
lotus dominoLotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a...CVE-2001-09545.0 MediumDecember 7, 2001
volition red factionTHQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a...CVE-2001-0952Public exploit5.0 MediumDecember 7, 2001
microsoft windows 2000Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding...CVE-2001-0951Public exploitEPSS 27.4%5.0 MediumDecember 7, 2001
wliang wmtvwmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute...CVE-2001-12724.6 MediumDecember 6, 2001
phpPHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the...CVE-2001-12476.4 MediumDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not...CVE-2001-08677.5 HighDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound...CVE-2001-08667.5 HighDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment"...CVE-2001-08657.5 HighDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit ...CVE-2001-08647.5 HighDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword...CVE-2001-08635.0 MediumDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet...CVE-2001-08627.5 HighDecember 6, 2001
cisco 12000 routerCisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to...CVE-2001-08615.0 MediumDecember 6, 2001
microsoft windows 2000, windows xp +1 moreTerminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that...CVE-2001-08607.5 HighDecember 6, 2001
redhat linux2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask...CVE-2001-08595.0 MediumDecember 6, 2001
imp webmailCross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote...CVE-2001-0857Public exploit7.5 HighDecember 6, 2001
redhat linuxTUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via...CVE-2001-0852Public exploit5.0 MediumDecember 6, 2001
linux kernel, suse linux, caldera openlinux +4 more +6 moreLinux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall...CVE-2001-08515.0 MediumDecember 6, 2001
caldera openlinuxA configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the...CVE-2001-085010.0 HighDecember 6, 2001
lotus dominoLotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting...CVE-2001-0846EPSS 41.2%10.0 HighDecember 6, 2001
squid web proxySquid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash)...CVE-2001-08435.0 MediumDecember 6, 2001
deltathree pc-to-phoneDeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the...CVE-2001-08372.1 LowDecember 6, 2001
oracle application server web cacheBuffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code...CVE-2001-0836Public exploitEPSS 14.7%7.5 HighDecember 6, 2001
htdig, conectiva linux +1 morehtsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c...CVE-2001-08346.4 MediumDecember 6, 2001
oracle database serverBuffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary...CVE-2001-0833Public exploit7.2 HighDecember 6, 2001
6tunnel project 6tunnel6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which...CVE-2001-0830Public exploit7.5 HighDecember 6, 2001
caucho technology resinA cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious...CVE-2001-08285.1 MediumDecember 6, 2001
xinetdBuffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote...CVE-2001-082510.0 HighDecember 6, 2001
sgi performance co-pilotThe pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain...CVE-2001-0823Public exploit7.2 HighDecember 6, 2001
packet knights fpf linux kernel moduleFPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.CVE-2001-08225.0 MediumDecember 6, 2001
fetchmailA buffer overflow in Linux fetchmail before 5.8.6 allows remote attackers to execute arbitrary...CVE-2001-08197.5 HighDecember 6, 2001
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open