Overview 206 matches · 3 in Waratek scope · 1 protected · 1 exploited · 0 CISA KEV · 63 public PoC · 1 EPSS ≥ 0.5
206matches
3in Waratek scope1.5%
1protected0.5%
1exploited0.5%
0CISA KEV0.0%
63public PoC30.6%
1EPSS ≥ 0.50.5%
Protected by Waratek
1
0.5%
Rule in development
0
0.0%
Mitigation candidate
1
0.5%
No exploit published
1
0.5%
Outside Waratek scope
3
1.5%
Not applicable
199
96.6%
Withdrawn CVE
1
0.5%
blocked by ARMR today
1
0.5%
partly blocked
0
0.0%
not blocked
205
99.5%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.5%
Working exploit published
62
30.1%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
143
69.4%
split by
peak 206 / month
Aug 01
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1452 | High | 2001-08-31 | Not applicable | No public exploit | By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses. |
| CVE-2001-1073 | Medium | 2001-08-31 | Not applicable | No public exploit | Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR. |
| CVE-2001-1072 | Medium | 2001-08-31 | Not applicable | No public exploit | Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail. |
| CVE-2001-1070 | Low | 2001-08-31 | Not applicable | No public exploit | Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters. |
| CVE-2001-1069 | High | 2001-08-31 | Not applicable | No public exploit | libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior. |
| CVE-2001-1068 | Medium | 2001-08-31 | Not applicable | No public exploit | qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system. |
| CVE-2001-1067 | High | 2001-08-31 | Not applicable | Working exploit published | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header. |
| CVE-2001-1066 | Low | 2001-08-31 | Not applicable | No public exploit | ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-1065 | Medium | 2001-08-31 | Not applicable | No public exploit | Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack. |
| CVE-2001-1064 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets. |
| CVE-2001-1063 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument. |
| CVE-2001-1062 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. |
| CVE-2001-1061 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. |
| CVE-2001-1041 | Low | 2001-08-31 | Outside Waratek scope | No public exploit | oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. |
| CVE-2001-1040 | Medium | 2001-08-31 | Not applicable | No public exploit | HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password. |
| CVE-2001-1039 | High | 2001-08-31 | Not applicable | No public exploit | The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer. |
| CVE-2001-1036 | High | 2001-08-31 | Not applicable | Working exploit published | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory. |
| CVE-2001-1027 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title. |
| CVE-2001-1025 | High | 2001-08-31 | Not applicable | No public exploit | PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php. |
| CVE-2001-1009 | High | 2001-08-31 | Not applicable | Working exploit published | Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. |
| CVE-2001-1008 | High | 2001-08-31 | Outside Waratek scope | No public exploit | Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. |
| CVE-2001-1007 | Medium | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack. |
| CVE-2001-1006 | Medium | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application. |
| CVE-2001-1005 | High | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges. |
| CVE-2001-1004 | Medium | 2001-08-31 | Not applicable | No public exploit | Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags. |
| CVE-2001-1003 | Medium | 2001-08-31 | Not applicable | Working exploit published | Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges. |
| CVE-2001-1002 | High | 2001-08-31 | Not applicable | Working exploit published | The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands. |
| CVE-2001-0995 | High | 2001-08-31 | Not applicable | No public exploit | PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. |
| CVE-2001-0983 | Medium | 2001-08-31 | Not applicable | Working exploit published | UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges. |
| CVE-2001-0981 | High | 2001-08-31 | Not applicable | No public exploit | HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user. |
| CVE-2001-0976 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables. |
| CVE-2001-0973 | Medium | 2001-08-31 | Not applicable | No public exploit | BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space. |
| CVE-2001-0972 | High | 2001-08-31 | Not applicable | No public exploit | Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888." |
| CVE-2001-0971 | Medium | 2001-08-31 | Not applicable | No public exploit | Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request. |
| CVE-2001-0970 | High | 2001-08-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script. |
| CVE-2001-0969 | High | 2001-08-31 | Not applicable | No public exploit | ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts. |
| CVE-2001-0968 | High | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges. |
| CVE-2001-0967 | Critical | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing. |
| CVE-2001-0966 | High | 2001-08-31 | Not applicable | No public exploit | Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command. |
| CVE-2001-0965 | Medium | 2001-08-31 | Not applicable | Working exploit published | glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters. |
| CVE-2001-0943 | High | 2001-08-31 | Outside Waratek scope | No public exploit | dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs. |
| CVE-2001-0711 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string. |
| CVE-2000-1202 | High | 2001-08-31 | Not applicable | No public exploit | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class. |
| CVE-2000-1201 | Medium | 2001-08-31 | Not applicable | No public exploit | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. |
| CVE-2000-1200 | Medium | 2001-08-31 | Not applicable | No public exploit | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. |
| CVE-2000-1199 | Medium | 2001-08-31 | Not applicable | Working exploit published | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. |
| CVE-2000-1198 | Medium | 2001-08-31 | Not applicable | Working exploit published | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. |
| CVE-2000-1197 | Low | 2001-08-31 | Not applicable | No public exploit | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. |
| CVE-2000-1196 | Medium | 2001-08-31 | Not applicable | Working exploit published | PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter. |
| CVE-2000-1195 | High | 2001-08-31 | Not applicable | No public exploit | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option. |
| CVE-2000-1194 | High | 2001-08-31 | Not applicable | No public exploit | Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands. |
| CVE-2000-1193 | Medium | 2001-08-31 | Not applicable | Working exploit published | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port. |
| CVE-2000-1192 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. |
| CVE-2000-1191 | Medium | 2001-08-31 | Not applicable | No public exploit | htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path. |
| CVE-2000-1190 | Low | 2001-08-31 | Not applicable | No public exploit | imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. |
| CVE-2001-1154 | Medium | 2001-08-30 | Not applicable | No public exploit | Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients. |
| CVE-2001-1389 | High | 2001-08-29 | Not applicable | No public exploit | Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination. |
| CVE-2001-1379 | High | 2001-08-29 | Not applicable | No public exploit | The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name. |
| CVE-2001-1168 | Medium | 2001-08-29 | Not applicable | No public exploit | Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter. |
| CVE-2001-0682 | Medium | 2001-08-29 | Not applicable | No public exploit | ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting. |
| CVE-2001-1167 | Unknown | 2001-08-28 | Withdrawn CVE | No public exploit | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2001-0976. Reason: This candidate is a duplicate of CVE-2001-0976. Notes: CVE-2001-0976 should be used instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage |
| CVE-2001-1153 | High | 2001-08-28 | Not applicable | No public exploit | lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. |
| CVE-2001-1444 | High | 2001-08-27 | Not applicable | No public exploit | The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack. |
| CVE-2001-1443 | Medium | 2001-08-27 | Not applicable | No public exploit | KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack. |
| CVE-2001-1455 | High | 2001-08-24 | Not applicable | No public exploit | Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters. |
| CVE-2001-1155 | Critical | 2001-08-23 | Not applicable | No public exploit | TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing. |
| CVE-2001-1091 | High | 2001-08-23 | Not applicable | No public exploit | The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable. |
| CVE-2001-1294 | Medium | 2001-08-22 | Not applicable | No public exploit | Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password. |
| CVE-2001-1150 | Medium | 2001-08-22 | Not applicable | No public exploit | Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files. |
| CVE-2001-1140 | Medium | 2001-08-22 | Not applicable | No public exploit | BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request. |
| CVE-2001-1139 | Medium | 2001-08-22 | Not applicable | No public exploit | Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. |
| CVE-2001-0634 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service. |
| CVE-2001-0633 | Medium | 2001-08-22 | Not applicable | No public exploit | Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'. |
| CVE-2001-0632 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. |
| CVE-2001-0631 | Medium | 2001-08-22 | Not applicable | No public exploit | Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users. |
| CVE-2001-0630 | Medium | 2001-08-22 | Not applicable | Working exploit published | Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable. |
| CVE-2001-0627 | Low | 2001-08-22 | Not applicable | No public exploit | vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0626 | High | 2001-08-22 | Not applicable | Working exploit published | O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. |
| CVE-2001-0625 | High | 2001-08-22 | Not applicable | No public exploit | ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log . |
| CVE-2001-0617 | High | 2001-08-22 | Not applicable | No public exploit | Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled. |
| CVE-2001-0614 | High | 2001-08-22 | Not applicable | Working exploit published | Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. |
| CVE-2001-0613 | Medium | 2001-08-22 | Not applicable | No public exploit | Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request. |
| CVE-2001-0612 | Medium | 2001-08-22 | Not applicable | No public exploit | McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045. |
| CVE-2001-0608 | High | 2001-08-22 | Not applicable | No public exploit | HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program. |
| CVE-2001-0607 | Medium | 2001-08-22 | Not applicable | No public exploit | asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083. |
| CVE-2001-0606 | Medium | 2001-08-22 | Not applicable | No public exploit | Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. |
| CVE-2001-0605 | High | 2001-08-22 | Not applicable | No public exploit | Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data. |
| CVE-2001-0593 | Medium | 2001-08-22 | Not applicable | Working exploit published | Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter. |
| CVE-2001-0591 | High | 2001-08-22 | Protected by Waratek | No public exploit | Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack. |
| CVE-2001-0589 | Low | 2001-08-22 | Not applicable | No public exploit | NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns. |
| CVE-2001-0588 | Medium | 2001-08-22 | Not applicable | No public exploit | sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command. |
| CVE-2001-0587 | High | 2001-08-22 | Not applicable | No public exploit | deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command. |
| CVE-2001-0586 | Medium | 2001-08-22 | Not applicable | No public exploit | TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords. |
| CVE-2001-0585 | Medium | 2001-08-22 | Not applicable | No public exploit | Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000. |
| CVE-2001-0584 | Low | 2001-08-22 | Not applicable | Working exploit published | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands. |
| CVE-2001-0583 | Medium | 2001-08-22 | Not applicable | No public exploit | Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001. |
| CVE-2001-0582 | Medium | 2001-08-22 | Not applicable | No public exploit | Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR. |
| CVE-2001-0581 | Medium | 2001-08-22 | Not applicable | Working exploit published | Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387. |
| CVE-2001-0580 | Medium | 2001-08-22 | Not applicable | Working exploit published | Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection. |
| CVE-2001-0579 | High | 2001-08-22 | Not applicable | Working exploit published | lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command. |