Latest CVE Feed
-
7.5
HIGHCVE-2001-0347
Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid.... Read more
Affected Products : windows_2000- EPSS Score: %13.66
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0513
Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not co... Read more
Affected Products : oracle9i- EPSS Score: %0.90
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0346
Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them.... Read more
Affected Products : windows_2000- EPSS Score: %8.11
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0516
Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.... Read more
- EPSS Score: %0.54
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2000-0891
A default ECL in Lotus Notes before 5.02 allows remote attackers to execute arbitrary commands by attaching a malicious program in an email message that is automatically executed when the user opens the email.... Read more
Affected Products : lotus_notes- EPSS Score: %3.32
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
2.6
LOWCVE-2000-0892
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.... Read more
- EPSS Score: %0.66
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0499
Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.... Read more
- EPSS Score: %74.94
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0340
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is execu... Read more
Affected Products : exchange_server- EPSS Score: %6.26
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0002
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.... Read more
- EPSS Score: %25.60
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0353
Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine.... Read more
- EPSS Score: %1.48
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0518
Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang.... Read more
Affected Products : oracle9i- EPSS Score: %0.39
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0348
Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.... Read more
Affected Products : windows_2000- EPSS Score: %28.41
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-0351
Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service.... Read more
Affected Products : windows_2000- EPSS Score: %0.44
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0018
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.... Read more
Affected Products : windows_2000- EPSS Score: %20.49
- Published: Jul. 21, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1355
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup comma... Read more
- EPSS Score: %1.33
- Published: Jul. 20, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1265
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.... Read more
Affected Products : alphaworks_tftp_server- EPSS Score: %0.75
- Published: Jul. 20, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1354
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as ... Read more
- EPSS Score: %0.15
- Published: Jul. 20, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1172
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.... Read more
Affected Products : httprotect- EPSS Score: %0.08
- Published: Jul. 19, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1361
Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links.... Read more
Affected Products : twig- EPSS Score: %0.47
- Published: Jul. 19, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1375
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.... Read more
- EPSS Score: %0.14
- Published: Jul. 19, 2001
- Modified: Apr. 03, 2025