Overview 1,419 matches · 9 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 55 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
9
0.6%
No exploit published
0
0.0%
Outside Waratek scope
6
0.4%
Not applicable
1,401
98.7%
Withdrawn CVE
3
0.2%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,419
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1,419
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 480 / year
19881
Not applicable1
High1
not blocked1
Working exploit published1
19890
19901
Not applicable1
Medium1
not blocked1
Working exploit published1
19912
Not applicable2
High2
not blocked2
Working exploit published2
19920
19930
19946
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published6
19955
Not applicable5
Critical1
High2
Medium2
not blocked5
Working exploit published5
199618
Not applicable17
Withdrawn CVE1
High12
Medium5
Unknown1
not blocked18
Working exploit published18
199773
Not applicable73
High51
Medium18
Low4
not blocked73
Working exploit published73
199850
Not applicable50
Critical1
High33
Medium11
Low5
not blocked50
Working exploit published50
1999282
Outside Waratek scope1
Not applicable280
Withdrawn CVE1
Critical2
High132
Medium119
Low28
Unknown1
not blocked282
Working exploit published282
2000427
Mitigation candidate6
Outside Waratek scope1
Not applicable420
Critical1
High197
Medium195
Low34
not blocked427
Working exploit published427
2001480
Mitigation candidate2
Outside Waratek scope4
Not applicable474
Critical4
High219
Medium219
Low38
not blocked480
Working exploit published480
200274
Mitigation candidate1
Not applicable72
Withdrawn CVE1
Critical1
High44
Medium27
Low1
Unknown1
not blocked74
Working exploit published74
19881990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2002-0311 | High | 2002-05-31 | Not applicable | Working exploit published | Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi. |
| CVE-2002-0300 | Medium | 2002-05-31 | Not applicable | Working exploit published | gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file. |
| CVE-2002-0296 | Low | 2002-05-31 | Not applicable | Working exploit published | The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file. |
| CVE-2002-0289 | Medium | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request. |
| CVE-2002-0288 | Medium | 2002-05-31 | Not applicable | Working exploit published | Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request. |
| CVE-2002-0280 | High | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply. |
| CVE-2002-0276 | High | 2002-05-31 | Not applicable | Working exploit published | Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets. |
| CVE-2002-0375 | Medium | 2002-05-29 | Not applicable | Working exploit published | Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter. |
| CVE-2002-0266 | Medium | 2002-05-29 | Not applicable | Working exploit published | Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname. |
| CVE-2002-0265 | Medium | 2002-05-29 | Not applicable | Working exploit published | Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file. |
| CVE-2002-0263 | High | 2002-05-29 | Not applicable | Working exploit published | Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to (1) ezboard.cgi, (2) ezman.cgi, or (3) ezadmin.cgi. |
| CVE-2002-0256 | Medium | 2002-05-29 | Not applicable | Working exploit published | The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop. |
| CVE-2002-0252 | High | 2002-05-29 | Not applicable | Working exploit published | Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header. |
| CVE-2002-0250 | High | 2002-05-29 | Not applicable | Working exploit published | Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password. |
| CVE-2002-0246 | High | 2002-05-29 | Not applicable | Working exploit published | Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint. |
| CVE-2002-0244 | High | 2002-05-29 | Not applicable | Working exploit published | Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir. |
| CVE-2002-0239 | High | 2002-05-29 | Not applicable | Working exploit published | Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument. |
| CVE-2002-0236 | High | 2002-05-29 | Not applicable | Working exploit published | Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user. |
| CVE-2002-0193 | High | 2002-05-29 | Not applicable | Working exploit published | Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability. |
| CVE-2002-0192 | Unknown | 2002-05-29 | Withdrawn CVE | Working exploit published | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0193, CVE-2002-1564. Reason: This candidate was published with a description that identified a different vulnerability than what was identified in the original authoritative reference. Notes: Consult CVE-2002-0193 or CVE-2002-1564 to find the identifier for the proper issue |
| CVE-2002-0191 | Medium | 2002-05-29 | Not applicable | Working exploit published | Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability. |
| CVE-2002-0189 | High | 2002-05-29 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability. |
| CVE-2002-0033 | High | 2002-05-29 | Not applicable | Working exploit published | Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name. |
| CVE-2002-1447 | High | 2002-05-28 | Not applicable | Working exploit published | Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument. |
| CVE-2001-1334 | Medium | 2002-05-19 | Not applicable | Working exploit published | Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL. |
| CVE-2002-0231 | High | 2002-05-16 | Not applicable | Working exploit published | Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname. |
| CVE-2002-0230 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message. |
| CVE-2002-0229 | High | 2002-05-16 | Not applicable | Working exploit published | Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements. |
| CVE-2002-0227 | Medium | 2002-05-16 | Not applicable | Working exploit published | KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message. |
| CVE-2002-0215 | Medium | 2002-05-16 | Not applicable | Working exploit published | Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message. |
| CVE-2002-0211 | Medium | 2002-05-16 | Not applicable | Working exploit published | Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed. |
| CVE-2002-0210 | High | 2002-05-16 | Not applicable | Working exploit published | setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file. |
| CVE-2002-0209 | Medium | 2002-05-16 | Not applicable | Working exploit published | Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address. |
| CVE-2002-0207 | High | 2002-05-16 | Not applicable | Working exploit published | Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header. |
| CVE-2002-0206 | High | 2002-05-16 | Not applicable | Working exploit published | index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter. |
| CVE-2002-0201 | Medium | 2002-05-16 | Not applicable | Working exploit published | Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow. |
| CVE-2002-0184 | High | 2002-05-16 | Not applicable | Working exploit published | Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. |
| CVE-2002-1602 | Medium | 2002-04-23 | Not applicable | Working exploit published | Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code. |
| CVE-2002-0177 | High | 2002-04-22 | Not applicable | Working exploit published | Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client. |
| CVE-2002-0153 | High | 2002-04-22 | Not applicable | Working exploit published | Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability. |
| CVE-2002-0148 | High | 2002-04-22 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page. |
| CVE-2002-0079 | High | 2002-04-22 | Not applicable | Working exploit published | Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code. |
| CVE-2002-0158 | High | 2002-04-02 | Not applicable | Working exploit published | Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument. |
| CVE-2001-1165 | Medium | 2002-04-01 | Not applicable | Working exploit published | Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool. |
| CVE-2002-0162 | Medium | 2002-03-27 | Not applicable | Working exploit published | LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. |
| CVE-2002-0163 | High | 2002-03-26 | Not applicable | Working exploit published | Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses. |
| CVE-2002-0143 | Medium | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2002-0142 | High | 2002-03-25 | Not applicable | Working exploit published | CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters. |
| CVE-2002-0140 | High | 2002-03-25 | Not applicable | Working exploit published | Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. |
| CVE-2002-0137 | High | 2002-03-25 | Not applicable | Working exploit published | CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file. |
| CVE-2002-0135 | Medium | 2002-03-25 | Not applicable | Working exploit published | Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420). |
| CVE-2002-0132 | High | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable. |
| CVE-2002-0128 | High | 2002-03-25 | Not applicable | Working exploit published | cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument. |
| CVE-2002-0118 | High | 2002-03-25 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. |
| CVE-2002-0117 | High | 2002-03-25 | Not applicable | Working exploit published | Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag. |
| CVE-2002-0115 | Medium | 2002-03-25 | Not applicable | Working exploit published | Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet. |
| CVE-2002-0112 | Medium | 2002-03-25 | Not applicable | Working exploit published | Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL. |
| CVE-2002-0107 | Medium | 2002-03-25 | Not applicable | Working exploit published | Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message. |
| CVE-2002-0106 | Medium | 2002-03-25 | Mitigation candidate | Working exploit published | BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name. |
| CVE-2002-0098 | High | 2002-03-25 | Not applicable | Working exploit published | Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner. |
| CVE-2002-0095 | High | 2002-03-25 | Not applicable | Working exploit published | The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed. |
| CVE-2002-0061 | High | 2002-03-21 | Not applicable | Working exploit published | Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe. |
| CVE-2002-0083 | Critical | 2002-03-15 | Not applicable | Working exploit published | Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. |
| CVE-2002-0082 | High | 2002-03-15 | Not applicable | Working exploit published | The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session. |
| CVE-2002-0068 | High | 2002-03-08 | Not applicable | Working exploit published | Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters. |
| CVE-2002-0023 | Medium | 2002-03-08 | Not applicable | Working exploit published | Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks. |
| CVE-2002-0048 | High | 2002-02-27 | Not applicable | Working exploit published | Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server. |
| CVE-2002-0004 | High | 2002-02-27 | Not applicable | Working exploit published | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice. |
| CVE-2002-1603 | Medium | 2002-02-13 | Not applicable | Working exploit published | GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed. |
| CVE-2002-0013 | High | 2002-02-13 | Not applicable | Working exploit published | Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. |
| CVE-2002-0043 | High | 2002-01-31 | Not applicable | Working exploit published | sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked. |
| CVE-2002-0005 | High | 2002-01-31 | Not applicable | Working exploit published | Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame). |
| CVE-2002-0002 | High | 2002-01-31 | Not applicable | Working exploit published | Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code. |
| CVE-1999-1081 | Medium | 2002-01-15 | Not applicable | Working exploit published | Vulnerability in files.pl script in Novell WebServer Examples Toolkit 2 allows remote attackers to read arbitrary files. |
| CVE-2001-1583 | High | 2001-12-31 | Not applicable | Working exploit published | lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220. |
| CVE-2001-1582 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. |
| CVE-2001-1561 | High | 2001-12-31 | Not applicable | Working exploit published | Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments. |
| CVE-2001-1560 | Low | 2001-12-31 | Not applicable | Working exploit published | Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message. |
| CVE-2001-1559 | Medium | 2001-12-31 | Not applicable | Working exploit published | The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference. |
| CVE-2001-1549 | Low | 2001-12-31 | Not applicable | Working exploit published | Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters. |
| CVE-2001-1546 | High | 2001-12-31 | Not applicable | Working exploit published | Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file. |
| CVE-2001-1528 | Medium | 2001-12-31 | Not applicable | Working exploit published | AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid account numbers via a brute force attack. |
| CVE-2001-1525 | Medium | 2001-12-31 | Not applicable | Working exploit published | Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter. |
| CVE-2001-1524 | Medium | 2001-12-31 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php. |
| CVE-2001-1519 | Low | 2001-12-31 | Not applicable | Working exploit published | RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it |
| CVE-2001-1518 | Low | 2001-12-31 | Not applicable | Working exploit published | RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability. |
| CVE-2001-1502 | High | 2001-12-31 | Not applicable | Working exploit published | webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter. |
| CVE-2001-1501 | Medium | 2001-12-31 | Not applicable | Working exploit published | The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument. |
| CVE-2001-1491 | Medium | 2001-12-31 | Not applicable | Working exploit published | Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1490 | Medium | 2001-12-31 | Not applicable | Working exploit published | Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1489 | Medium | 2001-12-31 | Not applicable | Working exploit published | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images. |
| CVE-2001-1487 | Medium | 2001-12-31 | Not applicable | Working exploit published | popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option. |
| CVE-2001-1209 | Medium | 2001-12-31 | Not applicable | Working exploit published | Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. |
| CVE-2001-1202 | High | 2001-12-28 | Not applicable | Working exploit published | Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error. |
| CVE-2001-0873 | High | 2001-12-21 | Not applicable | Working exploit published | uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option. |
| CVE-2001-1212 | Medium | 2001-12-18 | Not applicable | Working exploit published | Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter. |
| CVE-2001-1199 | High | 2001-12-17 | Not applicable | Working exploit published | Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter. |
| CVE-2001-1196 | High | 2001-12-17 | Not applicable | Working exploit published | Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument. |
| CVE-2001-1195 | High | 2001-12-15 | Not applicable | Working exploit published | Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges. |
| CVE-2001-1194 | Medium | 2001-12-14 | Not applicable | Working exploit published | Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly. |