Overview 449 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 110 public PoC · 4 EPSS ≥ 0.5
449matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
110public PoC24.5%
4EPSS ≥ 0.50.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
2
0.4%
Not applicable
447
99.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
449
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
110
24.5%
Proof of concept only
0
0.0%
Forecast only
2
0.4%
No public exploit
337
75.1%
split by
peak 182 / year
19901
Not applicable1
Low1
not blocked1
No public exploit1
19910
19921
Not applicable1
Low1
not blocked1
No public exploit1
19932
Not applicable2
Low2
not blocked2
No public exploit2
19941
Not applicable1
Low1
not blocked1
Working exploit published1
19951
Not applicable1
Low1
not blocked1
No public exploit1
19969
Not applicable9
Low9
not blocked9
No public exploit9
199719
Not applicable19
Low19
not blocked19
Working exploit published4
Forecast only2
No public exploit13
199823
Not applicable23
Low23
not blocked23
Working exploit published5
No public exploit18
1999111
Not applicable111
Low111
not blocked111
Working exploit published28
No public exploit83
200096
Not applicable96
Low96
not blocked96
Working exploit published34
No public exploit62
2001182
Outside Waratek scope2
Not applicable180
Low182
not blocked182
Working exploit published38
No public exploit144
20023
Not applicable3
Low3
not blocked3
No public exploit3
1990199219941996199820002002
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2001-1079 | Low | 2002-02-13 | Not applicable | No public exploit | create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service. |
| CVE-2002-0044 | Low | 2002-01-31 | Not applicable | No public exploit | GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. |
| CVE-2001-0887 | Low | 2002-01-15 | Not applicable | No public exploit | xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files. |
| CVE-2001-1578 | Low | 2001-12-31 | Not applicable | No public exploit | Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors. |
| CVE-2001-1570 | Low | 2001-12-31 | Not applicable | No public exploit | Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user (self) multiple times, which causes other accounts to be locked out. |
| CVE-2001-1565 | Low | 2001-12-31 | Not applicable | No public exploit | Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command. |
| CVE-2001-1564 | Low | 2001-12-31 | Not applicable | No public exploit | setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space. |
| CVE-2001-1560 | Low | 2001-12-31 | Not applicable | Working exploit published | Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message. |
| CVE-2001-1551 | Low | 2001-12-31 | Not applicable | No public exploit | Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs. |
| CVE-2001-1550 | Low | 2001-12-31 | Not applicable | No public exploit | CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users. |
| CVE-2001-1549 | Low | 2001-12-31 | Not applicable | Working exploit published | Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters. |
| CVE-2001-1548 | Low | 2001-12-31 | Not applicable | No public exploit | ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters. |
| CVE-2001-1534 | Low | 2001-12-31 | Not applicable | No public exploit | mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication. |
| CVE-2001-1527 | Low | 2001-12-31 | Not applicable | No public exploit | easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access. |
| CVE-2001-1521 | Low | 2001-12-31 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter. |
| CVE-2001-1520 | Low | 2001-12-31 | Not applicable | No public exploit | Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN. |
| CVE-2001-1519 | Low | 2001-12-31 | Not applicable | Working exploit published | RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it |
| CVE-2001-1518 | Low | 2001-12-31 | Not applicable | Working exploit published | RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service. NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability. |
| CVE-2001-1517 | Low | 2001-12-31 | Not applicable | No public exploit | RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command. NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information |
| CVE-2001-1503 | Low | 2001-12-31 | Not applicable | No public exploit | The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host. |
| CVE-2001-1497 | Low | 2001-12-31 | Not applicable | No public exploit | Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack. |
| CVE-2001-1479 | Low | 2001-12-31 | Not applicable | No public exploit | smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT. |
| CVE-2001-1225 | Low | 2001-12-26 | Not applicable | No public exploit | Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried. |
| CVE-2001-1218 | Low | 2001-12-20 | Not applicable | No public exploit | Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window. |
| CVE-2001-0890 | Low | 2001-12-11 | Not applicable | No public exploit | Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files. |
| CVE-2001-0837 | Low | 2001-12-06 | Not applicable | No public exploit | DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder. |
| CVE-2001-0832 | Low | 2001-12-06 | Outside Waratek scope | No public exploit | Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability." |
| CVE-2001-0809 | Low | 2001-12-06 | Not applicable | No public exploit | Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources. |
| CVE-2001-0807 | Low | 2001-12-06 | Not applicable | No public exploit | Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file. |
| CVE-2001-0806 | Low | 2001-12-06 | Not applicable | No public exploit | Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages. |
| CVE-2001-0946 | Low | 2001-12-04 | Not applicable | No public exploit | apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins. |
| CVE-2001-0921 | Low | 2001-11-21 | Not applicable | No public exploit | Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext. |
| CVE-2001-0914 | Low | 2001-11-21 | Not applicable | No public exploit | Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading. |
| CVE-2001-1387 | Low | 2001-11-05 | Not applicable | No public exploit | iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak. |
| CVE-2001-0715 | Low | 2001-10-30 | Not applicable | No public exploit | Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode. |
| CVE-2001-0714 | Low | 2001-10-30 | Not applicable | No public exploit | Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option. |
| CVE-2001-0666 | Low | 2001-10-30 | Not applicable | No public exploit | Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox. |
| CVE-2001-0544 | Low | 2001-10-30 | Not applicable | No public exploit | IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table. |
| CVE-2001-0907 | Low | 2001-10-18 | Not applicable | Working exploit published | Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link. |
| CVE-2001-0744 | Low | 2001-10-18 | Not applicable | No public exploit | Horde IMP 2.2.4 and earlier allows local users to overwrite files via a symlink attack on a temporary file. |
| CVE-2001-0741 | Low | 2001-10-18 | Not applicable | Working exploit published | Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets. |
| CVE-2001-0736 | Low | 2001-10-18 | Not applicable | Working exploit published | Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-1098 | Low | 2001-10-10 | Not applicable | No public exploit | Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file. |
| CVE-2001-1029 | Low | 2001-09-20 | Not applicable | Working exploit published | libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files. |
| CVE-2001-0706 | Low | 2001-09-20 | Not applicable | Working exploit published | Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders. |
| CVE-2001-0685 | Low | 2001-09-20 | Not applicable | Working exploit published | Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file. |
| CVE-2001-0642 | Low | 2001-09-20 | Not applicable | No public exploit | Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file. |
| CVE-2001-0547 | Low | 2001-09-20 | Not applicable | No public exploit | Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion). |
| CVE-2001-1353 | Low | 2001-09-18 | Not applicable | No public exploit | ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled. |
| CVE-2001-1136 | Low | 2001-09-13 | Not applicable | No public exploit | The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service. |
| CVE-2001-1406 | Low | 2001-09-10 | Not applicable | No public exploit | process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent. |
| CVE-2001-1405 | Low | 2001-09-10 | Not applicable | No public exploit | Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi. |
| CVE-2001-1092 | Low | 2001-09-10 | Not applicable | Working exploit published | msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file. |
| CVE-2001-1000 | Low | 2001-09-07 | Not applicable | Working exploit published | rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file. |
| CVE-2001-1378 | Low | 2001-09-06 | Not applicable | No public exploit | fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. |
| CVE-2001-1070 | Low | 2001-08-31 | Not applicable | No public exploit | Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters. |
| CVE-2001-1066 | Low | 2001-08-31 | Not applicable | No public exploit | ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack. |
| CVE-2001-1041 | Low | 2001-08-31 | Outside Waratek scope | No public exploit | oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable. |
| CVE-2000-1197 | Low | 2001-08-31 | Not applicable | No public exploit | POP2 or POP3 server (pop3d) in imap-uw IMAP package on FreeBSD and other operating systems creates lock files with predictable names, which allows local users to cause a denial of service (lack of mail access) for other users by creating lock files for other mail boxes. |
| CVE-2000-1190 | Low | 2001-08-31 | Not applicable | No public exploit | imwheel-solo in imwheel package allows local users to modify arbitrary files via a symlink attack from the .imwheelrc file. |
| CVE-2001-0627 | Low | 2001-08-22 | Not applicable | No public exploit | vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. |
| CVE-2001-0589 | Low | 2001-08-22 | Not applicable | No public exploit | NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns. |
| CVE-2001-0584 | Low | 2001-08-22 | Not applicable | Working exploit published | IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands. |
| CVE-2001-0569 | Low | 2001-08-22 | Not applicable | No public exploit | Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet. |
| CVE-2001-0568 | Low | 2001-08-22 | Not applicable | No public exploit | Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes. |
| CVE-2001-1133 | Low | 2001-08-21 | Not applicable | Working exploit published | Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. |
| CVE-2001-1301 | Low | 2001-08-07 | Not applicable | No public exploit | rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file. |
| CVE-2001-1122 | Low | 2001-08-03 | Not applicable | Working exploit published | Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode. |
| CVE-2001-0624 | Low | 2001-08-02 | Not applicable | No public exploit | QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos. |
| CVE-2001-0620 | Low | 2001-08-02 | Not applicable | No public exploit | iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions. |
| CVE-2001-1059 | Low | 2001-07-30 | Not applicable | No public exploit | VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information. |
| CVE-2001-1288 | Low | 2001-07-27 | Not applicable | No public exploit | Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe. |
| CVE-2001-0993 | Low | 2001-07-24 | Not applicable | No public exploit | sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length. |
| CVE-2001-1258 | Low | 2001-07-21 | Not applicable | No public exploit | Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server. |
| CVE-2001-0351 | Low | 2001-07-21 | Not applicable | No public exploit | Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service. |
| CVE-2000-0892 | Low | 2001-07-21 | Not applicable | No public exploit | Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL. |
| CVE-2001-1302 | Low | 2001-07-18 | Not applicable | No public exploit | The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function. |
| CVE-2001-1271 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames. |
| CVE-2001-1270 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files. |
| CVE-2001-1269 | Low | 2001-07-12 | Not applicable | No public exploit | Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character. |
| CVE-2001-1268 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename. |
| CVE-2001-1267 | Low | 2001-07-12 | Not applicable | No public exploit | Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot). |
| CVE-2001-1146 | Low | 2001-07-11 | Not applicable | No public exploit | AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack. |
| CVE-2001-1322 | Low | 2001-07-10 | Not applicable | No public exploit | xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask. |
| CVE-2001-1085 | Low | 2001-07-05 | Not applicable | Working exploit published | Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. |
| CVE-2001-0444 | Low | 2001-07-02 | Not applicable | No public exploit | Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information. |
| CVE-2001-0438 | Low | 2001-07-02 | Not applicable | No public exploit | Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu. |
| CVE-2001-0430 | Low | 2001-07-02 | Not applicable | No public exploit | Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files. |
| CVE-2001-0406 | Low | 2001-07-02 | Not applicable | Working exploit published | Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient. |
| CVE-2001-0384 | Low | 2001-07-02 | Not applicable | Working exploit published | ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file. |
| CVE-2001-0488 | Low | 2001-06-27 | Not applicable | No public exploit | pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service. |
| CVE-2001-0474 | Low | 2001-06-27 | Not applicable | No public exploit | Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file. |
| CVE-2001-0417 | Low | 2001-06-27 | Not applicable | No public exploit | Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files. |
| CVE-2001-0416 | Low | 2001-06-27 | Not applicable | No public exploit | sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools. |
| CVE-2001-0378 | Low | 2001-06-27 | Not applicable | No public exploit | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files. |
| CVE-2001-1276 | Low | 2001-06-21 | Not applicable | No public exploit | ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file. |
| CVE-2001-0409 | Low | 2001-06-18 | Not applicable | Working exploit published | vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory. |
| CVE-2001-0373 | Low | 2001-06-18 | Not applicable | No public exploit | The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information. |
| CVE-2001-0265 | Low | 2001-06-18 | Not applicable | Working exploit published | ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file. |
| CVE-2001-1277 | Low | 2001-06-11 | Not applicable | No public exploit | makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters. |