Overview 3,640 matches · 0 in Waratek scope · 0 protected · 16 exploited · 0 CISA KEV · 1,215 public PoC · 52 EPSS ≥ 0.5
3,640matches
0in Waratek scope0.0%
0protected0.0%
16exploited0.4%
0CISA KEV0.0%
1,215public PoC33.4%
52EPSS ≥ 0.51.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
3,640
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
3,640
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
16
0.4%
Working exploit published
1,202
33.0%
Proof of concept only
0
0.0%
Forecast only
3
0.1%
No public exploit
2,419
66.5%
split by
peak 1,066 / year
19882
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
19893
Not applicable3
High2
Medium1
not blocked3
No public exploit3
199011
Not applicable11
High8
Medium2
Low1
not blocked11
Working exploit published1
No public exploit10
199115
Not applicable15
High11
Medium4
not blocked15
Working exploit published2
No public exploit13
199213
Not applicable13
High12
Low1
not blocked13
No public exploit13
199313
Not applicable13
High8
Medium3
Low2
not blocked13
No public exploit13
199425
Not applicable25
High14
Medium10
Low1
not blocked25
Working exploit published6
No public exploit19
199525
Not applicable25
Critical1
High17
Medium6
Low1
not blocked25
Working exploit published5
No public exploit20
199673
Not applicable73
Critical1
High42
Medium21
Low9
not blocked73
Working exploit published17
Forecast only1
No public exploit55
1997252
Not applicable252
Critical1
High143
Medium89
Low19
not blocked252
Exploited2
Working exploit published73
Forecast only2
No public exploit175
1998246
Not applicable246
Critical1
High137
Medium85
Low23
not blocked246
Exploited1
Working exploit published50
No public exploit195
1999891
Not applicable891
Critical3
High421
Medium356
Low111
not blocked891
Exploited2
Working exploit published280
No public exploit609
20001,005
Not applicable1,005
Critical2
High447
Medium460
Low96
not blocked1,005
Exploited5
Working exploit published420
No public exploit580
20011,066
Not applicable1,066
Critical8
High486
Medium443
Low129
not blocked1,066
Exploited6
Working exploit published347
No public exploit713
1989199119931995199719992001
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1452 | High | 2001-08-31 | Not applicable | No public exploit | By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses. |
| CVE-2001-1073 | Medium | 2001-08-31 | Not applicable | No public exploit | Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR. |
| CVE-2001-1072 | Medium | 2001-08-31 | Not applicable | No public exploit | Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail. |
| CVE-2001-1070 | Low | 2001-08-31 | Not applicable | No public exploit | Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters. |
| CVE-2001-1069 | High | 2001-08-31 | Not applicable | No public exploit | libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior. |
| CVE-2001-1068 | Medium | 2001-08-31 | Not applicable | No public exploit | qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system. |
| CVE-2001-1067 | High | 2001-08-31 | Not applicable | Working exploit published | Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header. |
| CVE-2001-1066 | Low | 2001-08-31 | Not applicable | No public exploit | ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-1065 | Medium | 2001-08-31 | Not applicable | No public exploit | Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack. |
| CVE-2001-1064 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets. |
| CVE-2001-1063 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument. |
| CVE-2001-1062 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. |
| CVE-2001-1061 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error. |
| CVE-2001-1040 | Medium | 2001-08-31 | Not applicable | No public exploit | HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password. |
| CVE-2001-1039 | High | 2001-08-31 | Not applicable | No public exploit | The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer. |
| CVE-2001-1036 | High | 2001-08-31 | Not applicable | Working exploit published | GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory. |
| CVE-2001-1027 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title. |
| CVE-2001-1025 | High | 2001-08-31 | Not applicable | No public exploit | PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php. |
| CVE-2001-1009 | High | 2001-08-31 | Not applicable | Working exploit published | Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request. |
| CVE-2001-1007 | Medium | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack. |
| CVE-2001-1006 | Medium | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application. |
| CVE-2001-1005 | High | 2001-08-31 | Not applicable | No public exploit | Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges. |
| CVE-2001-1004 | Medium | 2001-08-31 | Not applicable | No public exploit | Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags. |
| CVE-2001-1003 | Medium | 2001-08-31 | Not applicable | Working exploit published | Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges. |
| CVE-2001-1002 | High | 2001-08-31 | Not applicable | Working exploit published | The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands. |
| CVE-2001-0995 | High | 2001-08-31 | Not applicable | No public exploit | PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. |
| CVE-2001-0983 | Medium | 2001-08-31 | Not applicable | Working exploit published | UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges. |
| CVE-2001-0981 | High | 2001-08-31 | Not applicable | No public exploit | HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user. |
| CVE-2001-0976 | High | 2001-08-31 | Not applicable | No public exploit | Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables. |
| CVE-2001-0973 | Medium | 2001-08-31 | Not applicable | No public exploit | BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space. |
| CVE-2001-0972 | High | 2001-08-31 | Not applicable | No public exploit | Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888." |
| CVE-2001-0971 | Medium | 2001-08-31 | Not applicable | No public exploit | Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request. |
| CVE-2001-0970 | High | 2001-08-31 | Not applicable | No public exploit | Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script. |
| CVE-2001-0969 | High | 2001-08-31 | Not applicable | No public exploit | ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts. |
| CVE-2001-0968 | High | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges. |
| CVE-2001-0967 | Critical | 2001-08-31 | Not applicable | No public exploit | Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing. |
| CVE-2001-0966 | High | 2001-08-31 | Not applicable | No public exploit | Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command. |
| CVE-2001-0965 | Medium | 2001-08-31 | Not applicable | Working exploit published | glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters. |
| CVE-2001-0711 | Medium | 2001-08-31 | Not applicable | Working exploit published | Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string. |
| CVE-2000-1202 | High | 2001-08-31 | Not applicable | No public exploit | ikeyman in IBM IBMHSSSB 1.0 sets the CLASSPATH environmental variable to include the user's own CLASSPATH directories before the system's directories, which allows a malicious local user to execute arbitrary code as root via a Trojan horse Ikeyman class. |
| CVE-2000-1201 | Medium | 2001-08-31 | Not applicable | No public exploit | Check Point FireWall-1 allows remote attackers to cause a denial of service (high CPU) via a flood of packets to port 264. |
| CVE-2000-1200 | Medium | 2001-08-31 | Not applicable | No public exploit | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. |
| CVE-2000-1199 | Medium | 2001-08-31 | Not applicable | Working exploit published | PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases. |
| CVE-2000-1198 | Medium | 2001-08-31 | Not applicable | Working exploit published | qpopper POP server creates lock files with predictable names, which allows local users to cause a denial of service for other users (lack of mail access) by creating lock files for other mail boxes. |
| CVE-2000-1197 | Low | 2001-08-31 | Not applicable | No public exploit | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. |
| CVE-2000-1196 | Medium | 2001-08-31 | Not applicable | Working exploit published | PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter. |
| CVE-2000-1195 | High | 2001-08-31 | Not applicable | No public exploit | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option. |
| CVE-2000-1194 | High | 2001-08-31 | Not applicable | No public exploit | Argosoft FRP server 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to the (1) USER or (2) CWD commands. |
| CVE-2000-1193 | Medium | 2001-08-31 | Not applicable | Working exploit published | Performance Metrics Collector Daemon (PMCD) in Performance Copilot in IRIX 6.x allows remote attackers to cause a denial of service (resource exhaustion) via an extremely long string to the PMCD port. |
| CVE-2000-1192 | High | 2001-08-31 | Not applicable | No public exploit | Buffer overflow in BTT Software SNMP Trap Watcher 1.16 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string trap. |
| CVE-2000-1191 | Medium | 2001-08-31 | Not applicable | No public exploit | htsearch program in htDig 3.2 beta, 3.1.6, 3.1.5, and earlier allows remote attackers to determine the physical path of the server by requesting a non-existent configuration file using the config parameter, which generates an error message that includes the full path. |
| CVE-2000-1190 | Low | 2001-08-31 | Not applicable | No public exploit | imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. |
| CVE-2001-1154 | Medium | 2001-08-30 | Not applicable | No public exploit | Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients. |
| CVE-2001-1389 | High | 2001-08-29 | Not applicable | No public exploit | Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination. |
| CVE-2001-1379 | High | 2001-08-29 | Not applicable | No public exploit | The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name. |
| CVE-2001-1168 | Medium | 2001-08-29 | Not applicable | No public exploit | Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter. |
| CVE-2001-0682 | Medium | 2001-08-29 | Not applicable | No public exploit | ZoneAlarm and ZoneAlarm Pro allows a local attacker to cause a denial of service by running a trojan to initialize a ZoneAlarm mutex object which prevents ZoneAlarm from starting. |
| CVE-2001-1153 | High | 2001-08-28 | Not applicable | No public exploit | lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. |
| CVE-2001-1444 | High | 2001-08-27 | Not applicable | No public exploit | The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack. |
| CVE-2001-1443 | Medium | 2001-08-27 | Not applicable | No public exploit | KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encryption, which allows remote attackers to read communications via a man-in-the-middle attack. |
| CVE-2001-1455 | High | 2001-08-24 | Not applicable | No public exploit | Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters. |
| CVE-2001-1155 | Critical | 2001-08-23 | Not applicable | No public exploit | TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing. |
| CVE-2001-1091 | High | 2001-08-23 | Not applicable | No public exploit | The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable. |
| CVE-2001-1294 | Medium | 2001-08-22 | Not applicable | No public exploit | Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password. |
| CVE-2001-1150 | Medium | 2001-08-22 | Not applicable | No public exploit | Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files. |
| CVE-2001-1140 | Medium | 2001-08-22 | Not applicable | No public exploit | BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request. |
| CVE-2001-1139 | Medium | 2001-08-22 | Not applicable | No public exploit | Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. |
| CVE-2001-0634 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service. |
| CVE-2001-0633 | Medium | 2001-08-22 | Not applicable | No public exploit | Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'. |
| CVE-2001-0632 | High | 2001-08-22 | Not applicable | No public exploit | Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges. |
| CVE-2001-0631 | Medium | 2001-08-22 | Not applicable | No public exploit | Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users. |
| CVE-2001-0630 | Medium | 2001-08-22 | Not applicable | Working exploit published | Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable. |
| CVE-2001-0627 | Low | 2001-08-22 | Not applicable | No public exploit | vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0626 | High | 2001-08-22 | Not applicable | Working exploit published | O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character. |
| CVE-2001-0625 | High | 2001-08-22 | Not applicable | No public exploit | ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log . |
| CVE-2001-0617 | High | 2001-08-22 | Not applicable | No public exploit | Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled. |
| CVE-2001-0614 | High | 2001-08-22 | Not applicable | Working exploit published | Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL. |
| CVE-2001-0613 | Medium | 2001-08-22 | Not applicable | No public exploit | Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request. |
| CVE-2001-0612 | Medium | 2001-08-22 | Not applicable | No public exploit | McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045. |
| CVE-2001-0608 | High | 2001-08-22 | Not applicable | No public exploit | HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program. |
| CVE-2001-0607 | Medium | 2001-08-22 | Not applicable | No public exploit | asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083. |
| CVE-2001-0606 | Medium | 2001-08-22 | Not applicable | No public exploit | Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. |
| CVE-2001-0605 | High | 2001-08-22 | Not applicable | No public exploit | Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data. |
| CVE-2001-0593 | Medium | 2001-08-22 | Not applicable | Working exploit published | Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter. |
| CVE-2001-0589 | Low | 2001-08-22 | Not applicable | No public exploit | NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns. |
| CVE-2001-0588 | Medium | 2001-08-22 | Not applicable | No public exploit | sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command. |
| CVE-2001-0587 | High | 2001-08-22 | Not applicable | No public exploit | deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command. |
| CVE-2001-0586 | Medium | 2001-08-22 | Not applicable | No public exploit | TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords. |
| CVE-2001-0585 | Medium | 2001-08-22 | Not applicable | No public exploit | Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000. |
| CVE-2001-0584 | Low | 2001-08-22 | Not applicable | Working exploit published | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands. |
| CVE-2001-0583 | Medium | 2001-08-22 | Not applicable | No public exploit | Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001. |
| CVE-2001-0582 | Medium | 2001-08-22 | Not applicable | No public exploit | Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR. |
| CVE-2001-0581 | Medium | 2001-08-22 | Not applicable | Working exploit published | Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387. |
| CVE-2001-0580 | Medium | 2001-08-22 | Not applicable | Working exploit published | Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection. |
| CVE-2001-0579 | High | 2001-08-22 | Not applicable | Working exploit published | lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command. |
| CVE-2001-0578 | Medium | 2001-08-22 | Not applicable | Working exploit published | Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command. |
| CVE-2001-0577 | High | 2001-08-22 | Not applicable | Working exploit published | recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument. |
| CVE-2001-0576 | Medium | 2001-08-22 | Not applicable | Working exploit published | lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter. |
| CVE-2001-0575 | Medium | 2001-08-22 | Not applicable | Working exploit published | Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut. |
| CVE-2001-0572 | High | 2001-08-22 | Not applicable | No public exploit | The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands. |