Overview 394 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 98 public PoC · 4 EPSS ≥ 0.5
394matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
98public PoC24.9%
4EPSS ≥ 0.51.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
0.3%
Not applicable
393
99.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
394
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
98
24.9%
Proof of concept only
0
0.0%
Forecast only
2
0.5%
No public exploit
294
74.6%
split by
peak 130 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200096
Not applicable96
Low96
not blocked96
Working exploit published34
No public exploit62
2001130
Outside Waratek scope1
Not applicable129
Low130
not blocked130
Working exploit published26
No public exploit104
199019911992199319941995199619971998199920002001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1070 | Low | 2001-08-31 | Not applicable | No public exploit | Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters. |
| CVE-2001-1066 | Low | 2001-08-31 | Not applicable | No public exploit | ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-1041 | Low | 2001-08-31 | Outside Waratek scope | No public exploit | oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. |
| CVE-2000-1197 | Low | 2001-08-31 | Not applicable | No public exploit | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. |
| CVE-2000-1190 | Low | 2001-08-31 | Not applicable | No public exploit | imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. |
| CVE-2001-0627 | Low | 2001-08-22 | Not applicable | No public exploit | vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0589 | Low | 2001-08-22 | Not applicable | No public exploit | NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns. |
| CVE-2001-0584 | Low | 2001-08-22 | Not applicable | Working exploit published | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands. |
| CVE-2001-0569 | Low | 2001-08-22 | Not applicable | No public exploit | Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet. |
| CVE-2001-0568 | Low | 2001-08-22 | Not applicable | No public exploit | Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes. |
| CVE-2001-1133 | Low | 2001-08-21 | Not applicable | Working exploit published | Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. |
| CVE-2001-1301 | Low | 2001-08-07 | Not applicable | No public exploit | rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file. |
| CVE-2001-1122 | Low | 2001-08-03 | Not applicable | Working exploit published | Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode. |
| CVE-2001-0624 | Low | 2001-08-02 | Not applicable | No public exploit | QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos. |
| CVE-2001-0620 | Low | 2001-08-02 | Not applicable | No public exploit | iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions. |
| CVE-2001-1059 | Low | 2001-07-30 | Not applicable | No public exploit | VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. |
| CVE-2001-1288 | Low | 2001-07-27 | Not applicable | No public exploit | Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe. |
| CVE-2001-0993 | Low | 2001-07-24 | Not applicable | No public exploit | sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length. |
| CVE-2001-1258 | Low | 2001-07-21 | Not applicable | No public exploit | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server. |
| CVE-2001-0351 | Low | 2001-07-21 | Not applicable | No public exploit | Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service. |
| CVE-2000-0892 | Low | 2001-07-21 | Not applicable | No public exploit | Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL. |
| CVE-2001-1302 | Low | 2001-07-18 | Not applicable | No public exploit | The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function. |
| CVE-2001-1271 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames. |
| CVE-2001-1270 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files. |
| CVE-2001-1269 | Low | 2001-07-12 | Not applicable | No public exploit | Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character. |
| CVE-2001-1268 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. |
| CVE-2001-1267 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot). |
| CVE-2001-1146 | Low | 2001-07-11 | Not applicable | No public exploit | AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack. |
| CVE-2001-1322 | Low | 2001-07-10 | Not applicable | No public exploit | xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask. |
| CVE-2001-1085 | Low | 2001-07-05 | Not applicable | Working exploit published | Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. |
| CVE-2001-0444 | Low | 2001-07-02 | Not applicable | No public exploit | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information. |
| CVE-2001-0438 | Low | 2001-07-02 | Not applicable | No public exploit | Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. |
| CVE-2001-0430 | Low | 2001-07-02 | Not applicable | No public exploit | Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files. |
| CVE-2001-0406 | Low | 2001-07-02 | Not applicable | Working exploit published | Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient. |
| CVE-2001-0384 | Low | 2001-07-02 | Not applicable | Working exploit published | ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. |
| CVE-2001-0488 | Low | 2001-06-27 | Not applicable | No public exploit | pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. |
| CVE-2001-0474 | Low | 2001-06-27 | Not applicable | No public exploit | Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file. |
| CVE-2001-0417 | Low | 2001-06-27 | Not applicable | No public exploit | Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files. |
| CVE-2001-0416 | Low | 2001-06-27 | Not applicable | No public exploit | sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools. |
| CVE-2001-0378 | Low | 2001-06-27 | Not applicable | No public exploit | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files. |
| CVE-2001-1276 | Low | 2001-06-21 | Not applicable | No public exploit | ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file. |
| CVE-2001-0409 | Low | 2001-06-18 | Not applicable | Working exploit published | vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory. |
| CVE-2001-0373 | Low | 2001-06-18 | Not applicable | No public exploit | The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information. |
| CVE-2001-0265 | Low | 2001-06-18 | Not applicable | Working exploit published | ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file. |
| CVE-2001-1277 | Low | 2001-06-11 | Not applicable | No public exploit | makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters. |
| CVE-2001-1256 | Low | 2001-06-11 | Not applicable | No public exploit | kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files. |
| CVE-2001-1047 | Low | 2001-06-02 | Not applicable | No public exploit | Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork. |
| CVE-2001-0310 | Low | 2001-06-02 | Not applicable | No public exploit | sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary file already exists, which causes sort to crash and possibly impacts security-sensitive scripts. |
| CVE-2001-0300 | Low | 2001-06-02 | Not applicable | No public exploit | oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack. |
| CVE-2001-0261 | Low | 2001-06-02 | Not applicable | No public exploit | Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files. |
| CVE-2001-0259 | Low | 2001-06-02 | Not applicable | Working exploit published | ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file. |
| CVE-2001-0156 | Low | 2001-06-02 | Not applicable | No public exploit | VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems. |
| CVE-2001-1349 | Low | 2001-05-28 | Not applicable | No public exploit | Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers. |
| CVE-2001-1346 | Low | 2001-05-18 | Not applicable | Working exploit published | Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp. |
| CVE-2001-1450 | Low | 2001-05-11 | Not applicable | No public exploit | Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./". |
| CVE-2001-1333 | Low | 2001-05-10 | Not applicable | No public exploit | Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files. |
| CVE-2001-1331 | Low | 2001-05-03 | Not applicable | No public exploit | mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks. |
| CVE-2001-0324 | Low | 2001-05-03 | Not applicable | Working exploit published | Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash. |
| CVE-2001-0317 | Low | 2001-05-03 | Not applicable | Working exploit published | Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process. |
| CVE-2001-0287 | Low | 2001-05-03 | Not applicable | No public exploit | VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command. |
| CVE-2001-0275 | Low | 2001-05-03 | Not applicable | No public exploit | Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request. |
| CVE-2001-0273 | Low | 2001-05-03 | Not applicable | No public exploit | pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext. |
| CVE-2001-0152 | Low | 2001-05-03 | Not applicable | No public exploit | The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders. |
| CVE-2001-1400 | Low | 2001-04-17 | Not applicable | No public exploit | Unknown vulnerabilities in the UDP port allocation for Linux kernel before 2.2.19 could allow local users to cause a denial of service (deadlock). |
| CVE-2001-1399 | Low | 2001-04-17 | Not applicable | No public exploit | Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86." |
| CVE-2001-1397 | Low | 2001-04-17 | Not applicable | No public exploit | The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory. |
| CVE-2001-1396 | Low | 2001-04-17 | Not applicable | No public exploit | Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact. |
| CVE-2001-1395 | Low | 2001-04-17 | Not applicable | No public exploit | Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact. |
| CVE-2001-1394 | Low | 2001-04-17 | Not applicable | No public exploit | Signedness error in (1) getsockopt and (2) setsockopt for Linux kernel before 2.2.19 allows local users to cause a denial of service. |
| CVE-2001-1393 | Low | 2001-04-17 | Not applicable | No public exploit | Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang). |
| CVE-2001-1392 | Low | 2001-04-17 | Not applicable | No public exploit | The Linux kernel before 2.2.19 does not have unregister calls for (1) CPUID and (2) MSR drivers, which could cause a DoS (crash) by unloading and reloading the drivers. |
| CVE-2001-0235 | Low | 2001-03-26 | Not applicable | No public exploit | Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running. |
| CVE-2001-0222 | Low | 2001-03-26 | Not applicable | No public exploit | webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack. |
| CVE-2001-0219 | Low | 2001-03-26 | Not applicable | No public exploit | Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service. |
| CVE-2001-0184 | Low | 2001-03-26 | Not applicable | Working exploit published | eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet. |
| CVE-2001-0178 | Low | 2001-03-26 | Not applicable | No public exploit | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges. |
| CVE-2001-0170 | Low | 2001-03-26 | Not applicable | Working exploit published | glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files. |
| CVE-2001-0169 | Low | 2001-03-26 | Not applicable | Working exploit published | When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib. |
| CVE-2001-0143 | Low | 2001-03-12 | Not applicable | No public exploit | vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0142 | Low | 2001-03-12 | Not applicable | No public exploit | squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
| CVE-2001-0141 | Low | 2001-03-12 | Not applicable | No public exploit | mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
| CVE-2001-0140 | Low | 2001-03-12 | Not applicable | No public exploit | arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
| CVE-2001-0139 | Low | 2001-03-12 | Not applicable | No public exploit | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. |
| CVE-2001-0138 | Low | 2001-03-12 | Not applicable | No public exploit | privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0135 | Low | 2001-03-12 | Not applicable | No public exploit | The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs. |
| CVE-2001-0132 | Low | 2001-03-12 | Not applicable | No public exploit | Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0131 | Low | 2001-03-12 | Not applicable | No public exploit | htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0125 | Low | 2001-03-12 | Not applicable | No public exploit | exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file. |
| CVE-2001-0120 | Low | 2001-03-12 | Not applicable | No public exploit | useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0119 | Low | 2001-03-12 | Not applicable | No public exploit | getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0118 | Low | 2001-03-12 | Not applicable | No public exploit | rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0117 | Low | 2001-03-12 | Not applicable | No public exploit | sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack. |
| CVE-2001-0116 | Low | 2001-03-12 | Not applicable | No public exploit | gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0109 | Low | 2001-03-12 | Not applicable | Working exploit published | rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file. |
| CVE-2000-0375 | Low | 2001-03-12 | Not applicable | No public exploit | The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files. |
| CVE-2000-0368 | Low | 2001-03-12 | Not applicable | No public exploit | Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data. |
| CVE-2000-0309 | Low | 2001-03-12 | Not applicable | No public exploit | The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service. |
| CVE-1999-0757 | Low | 2001-03-12 | Not applicable | Working exploit published | The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. |
| CVE-2001-1439 | Low | 2001-02-16 | Not applicable | No public exploit | Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit. |
| CVE-2001-0092 | Low | 2001-02-16 | Not applicable | No public exploit | A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability. |