Overview 1,216 matches · 8 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 44 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
8
0.7%
No exploit published
0
0.0%
Outside Waratek scope
4
0.3%
Not applicable
1,202
98.8%
Withdrawn CVE
2
0.2%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,216
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1,216
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 427 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001351
Mitigation candidate2
Outside Waratek scope2
Not applicable347
Critical3
High158
Medium164
Low26
not blocked351
Working exploit published351
1989199119931995199719992001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1067 | High | 2001-08-31 | Not applicable | Working exploit published | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header. |
| CVE-2001-1064 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets. |
| CVE-2001-1036 | High | 2001-08-31 | Not applicable | Working exploit published | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory. |
| CVE-2001-1009 | High | 2001-08-31 | Not applicable | Working exploit published | Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. |
| CVE-2001-1003 | Medium | 2001-08-31 | Not applicable | Working exploit published | Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges. |
| CVE-2001-1002 | High | 2001-08-31 | Not applicable | Working exploit published | The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands. |
| CVE-2001-0983 | Medium | 2001-08-31 | Not applicable | Working exploit published | UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges. |
| CVE-2001-0965 | Medium | 2001-08-31 | Not applicable | Working exploit published | glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters. |
| CVE-2001-0711 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string. |
| CVE-2000-1199 | Medium | 2001-08-31 | Not applicable | Working exploit published | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. |
| CVE-2000-1198 | Medium | 2001-08-31 | Not applicable | Working exploit published | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. |
| CVE-2000-1196 | Medium | 2001-08-31 | Not applicable | Working exploit published | PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter. |
| CVE-2000-1193 | Medium | 2001-08-31 | Not applicable | Working exploit published | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port. |
| CVE-2001-0630 | Medium | 2001-08-22 | Not applicable | Working exploit published | Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable. |
| CVE-2001-0626 | High | 2001-08-22 | Not applicable | Working exploit published | O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. |
| CVE-2001-0614 | High | 2001-08-22 | Not applicable | Working exploit published | Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. |
| CVE-2001-0593 | Medium | 2001-08-22 | Not applicable | Working exploit published | Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter. |
| CVE-2001-0584 | Low | 2001-08-22 | Not applicable | Working exploit published | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands. |
| CVE-2001-0581 | Medium | 2001-08-22 | Not applicable | Working exploit published | Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387. |
| CVE-2001-0580 | Medium | 2001-08-22 | Not applicable | Working exploit published | Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection. |
| CVE-2001-0579 | High | 2001-08-22 | Not applicable | Working exploit published | lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command. |
| CVE-2001-0578 | Medium | 2001-08-22 | Not applicable | Working exploit published | Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command. |
| CVE-2001-0577 | High | 2001-08-22 | Not applicable | Working exploit published | recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument. |
| CVE-2001-0576 | Medium | 2001-08-22 | Not applicable | Working exploit published | lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter. |
| CVE-2001-0575 | Medium | 2001-08-22 | Not applicable | Working exploit published | Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut. |
| CVE-2001-0571 | Medium | 2001-08-22 | Not applicable | Working exploit published | Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL. |
| CVE-2001-0564 | Medium | 2001-08-22 | Not applicable | Working exploit published | APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card. |
| CVE-2001-1133 | Low | 2001-08-21 | Not applicable | Working exploit published | Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. |
| CVE-2001-0616 | Medium | 2001-08-14 | Not applicable | Working exploit published | Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0). |
| CVE-2001-0615 | Medium | 2001-08-14 | Not applicable | Working exploit published | Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'. |
| CVE-2001-0574 | Medium | 2001-08-14 | Not applicable | Working exploit published | Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL. |
| CVE-2001-0566 | Medium | 2001-08-14 | Not applicable | Working exploit published | Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled. |
| CVE-2001-0565 | Medium | 2001-08-14 | Not applicable | Working exploit published | Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option. |
| CVE-2001-0563 | Medium | 2001-08-14 | Not applicable | Working exploit published | ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23. |
| CVE-2001-0561 | High | 2001-08-14 | Not applicable | Working exploit published | Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi. |
| CVE-2001-0559 | High | 2001-08-14 | Not applicable | Working exploit published | crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error. |
| CVE-2001-0558 | Medium | 2001-08-14 | Not applicable | Working exploit published | T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0). |
| CVE-2001-0557 | Medium | 2001-08-14 | Not applicable | Working exploit published | T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e). |
| CVE-2001-0555 | High | 2001-08-14 | Not applicable | Working exploit published | ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet. |
| CVE-2001-0553 | High | 2001-08-14 | Not applicable | Working exploit published | SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field. |
| CVE-2001-0548 | Medium | 2001-08-14 | Not applicable | Working exploit published | Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable. |
| CVE-2001-0538 | High | 2001-08-14 | Not applicable | Working exploit published | Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page. |
| CVE-2001-0527 | High | 2001-08-14 | Not applicable | Working exploit published | DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database. |
| CVE-2001-0526 | Medium | 2001-08-14 | Not applicable | Working exploit published | Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable. |
| CVE-2001-0522 | High | 2001-08-14 | Not applicable | Working exploit published | Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file. |
| CVE-2001-0521 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document. |
| CVE-2001-0520 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined. |
| CVE-2001-0519 | High | 2001-08-14 | Not applicable | Working exploit published | Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags. |
| CVE-2001-1115 | Medium | 2001-08-13 | Not applicable | Working exploit published | generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter. |
| CVE-2001-1259 | Medium | 2001-08-07 | Not applicable | Working exploit published | Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload. |
| CVE-2001-0647 | Medium | 2001-08-06 | Not applicable | Working exploit published | Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version. |
| CVE-2001-1472 | Medium | 2001-08-03 | Not applicable | Working exploit published | SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter. |
| CVE-2001-1122 | Low | 2001-08-03 | Not applicable | Working exploit published | Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode. |
| CVE-2001-1130 | High | 2001-08-02 | Not applicable | Working exploit published | Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file. |
| CVE-2001-0623 | Medium | 2001-08-02 | Not applicable | Working exploit published | sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges. |
| CVE-2001-0610 | Medium | 2001-08-02 | Not applicable | Working exploit published | kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp. |
| CVE-2001-0609 | Critical | 2001-08-02 | Not applicable | Working exploit published | Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function. |
| CVE-2001-0597 | High | 2001-08-02 | Not applicable | Working exploit published | Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'. |
| CVE-2001-0596 | High | 2001-08-02 | Not applicable | Working exploit published | Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript. |
| CVE-2001-0595 | Medium | 2001-08-02 | Not applicable | Working exploit published | Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program. |
| CVE-2001-0594 | Medium | 2001-08-02 | Not applicable | Working exploit published | kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument. |
| CVE-2001-0590 | Medium | 2001-08-02 | Mitigation candidate | Working exploit published | Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0). |
| CVE-2001-1471 | High | 2001-07-31 | Not applicable | Working exploit published | prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. |
| CVE-2001-1055 | Medium | 2001-07-30 | Not applicable | Working exploit published | The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke. |
| CVE-2001-1289 | Medium | 2001-07-29 | Not applicable | Working exploit published | Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters. |
| CVE-2001-1108 | High | 2001-07-26 | Not applicable | Working exploit published | Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL. |
| CVE-2001-1107 | Medium | 2001-07-26 | Not applicable | Working exploit published | SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server. |
| CVE-2001-1022 | High | 2001-07-26 | Not applicable | Working exploit published | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command. |
| CVE-2001-1021 | High | 2001-07-26 | Not applicable | Working exploit published | Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD. |
| CVE-2001-1106 | High | 2001-07-25 | Not applicable | Working exploit published | The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure. |
| CVE-2001-1104 | High | 2001-07-25 | Not applicable | Working exploit published | SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. |
| CVE-2001-1097 | Medium | 2001-07-24 | Not applicable | Working exploit published | Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. |
| CVE-2001-0991 | High | 2001-07-24 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message. |
| CVE-2001-0989 | High | 2001-07-23 | Not applicable | Working exploit published | Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign. |
| CVE-2001-1010 | Medium | 2001-07-22 | Not applicable | Working exploit published | Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter. |
| CVE-2001-0987 | High | 2001-07-22 | Not applicable | Working exploit published | Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap. |
| CVE-2001-1370 | High | 2001-07-21 | Not applicable | Working exploit published | prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib. |
| CVE-2001-0499 | High | 2001-07-21 | Not applicable | Working exploit published | Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD. |
| CVE-2001-0348 | Medium | 2001-07-21 | Not applicable | Working exploit published | Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace. |
| CVE-2001-0341 | High | 2001-07-21 | Not applicable | Working exploit published | Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll. |
| CVE-2001-1354 | Medium | 2001-07-20 | Not applicable | Working exploit published | NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password. |
| CVE-2001-1303 | Medium | 2001-07-18 | Not applicable | Working exploit published | The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication. |
| CVE-2001-1177 | Medium | 2001-07-17 | Not applicable | Working exploit published | ml85p in Samsung ML-85G GDI printer driver before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. |
| CVE-1999-1569 | Medium | 2001-07-17 | Not applicable | Working exploit published | Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit. |
| CVE-2001-1320 | High | 2001-07-16 | Not applicable | Working exploit published | Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite. |
| CVE-2001-1291 | Critical | 2001-07-12 | Not applicable | Working exploit published | The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing. |
| CVE-2001-1142 | Medium | 2001-07-12 | Not applicable | Working exploit published | ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges. |
| CVE-2001-1178 | High | 2001-07-11 | Not applicable | Working exploit published | Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable. |
| CVE-2001-1244 | Medium | 2001-07-07 | Not applicable | Working exploit published | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process. |
| CVE-2001-1045 | Medium | 2001-07-06 | Not applicable | Working exploit published | Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter. |
| CVE-2001-1408 | Medium | 2001-07-05 | Not applicable | Working exploit published | Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter. |
| CVE-2001-1085 | Low | 2001-07-05 | Not applicable | Working exploit published | Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. |
| CVE-2001-1076 | High | 2001-07-05 | Not applicable | Working exploit published | Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable. |
| CVE-2001-1243 | Medium | 2001-07-04 | Not applicable | Working exploit published | Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject. |
| CVE-2001-1086 | High | 2001-07-04 | Not applicable | Working exploit published | XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack. |
| CVE-2001-1075 | Medium | 2001-07-04 | Not applicable | Working exploit published | poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file. |
| CVE-2001-0486 | Medium | 2001-07-02 | Not applicable | Working exploit published | Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353. |
| CVE-2001-0464 | High | 2001-07-02 | Not applicable | Working exploit published | Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter. |
| CVE-2001-0440 | High | 2001-07-02 | Not applicable | Working exploit published | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. |
| CVE-2001-0432 | High | 2001-07-02 | Not applicable | Working exploit published | Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands. |