Latest CVE Feed
-
2.1
LOWCVE-2001-0409
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.... Read more
Affected Products : vim- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-0379
Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.... Read more
Affected Products : hp-ux- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1160
udirectory.pl in Microburst Technologies uDirectory 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the category_file field.... Read more
Affected Products : udirectory- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0448
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.... Read more
Affected Products : 602pro_lan_suite- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-0372
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.... Read more
Affected Products : akopia_interchange- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.... Read more
Affected Products : php-nuke- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.1
MEDIUMCVE-2001-0408
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.... Read more
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0413
BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which causes the router to hang.... Read more
- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-0433
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.... Read more
Affected Products : savant_webserver- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-0420
Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter.... Read more
Affected Products : talkback- Published: Jun. 18, 2001
- Modified: Apr. 03, 2025
-
10.0
HIGHCVE-2001-1163
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.... Read more
Affected Products : netsql- Published: Jun. 16, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.... Read more
Affected Products : rxvt- Published: Jun. 15, 2001
- Modified: Apr. 03, 2025
-
4.6
MEDIUMCVE-2001-1148
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm... Read more
Affected Products : openserver- Published: Jun. 13, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1344
WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot).... Read more
- Published: Jun. 12, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1343
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.... Read more
- Published: Jun. 12, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1330
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.... Read more
Affected Products : aix- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
2.1
LOWCVE-2001-1277
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.... Read more
Affected Products : makewhatis- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
7.2
HIGHCVE-2001-1329
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.... Read more
Affected Products : aix- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
5.0
MEDIUMCVE-2001-1368
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.... Read more
Affected Products : iplanet_web_server- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025
-
7.5
HIGHCVE-2001-1430
Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.... Read more
Affected Products : 3220-h_dsl_router- Published: Jun. 11, 2001
- Modified: Apr. 03, 2025