|
363201
|
4.6 |
MEDIUM
|
webct
|
respondus
|
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.
|
NVD-CWE-Other
|
CVE-2001-1003
|
2016-10-18 11:14 |
2001-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363202
|
2.1 |
LOW
|
oracle
|
database_server
|
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory …
|
NVD-CWE-Other
|
CVE-2001-1041
|
2016-10-18 11:14 |
2001-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363203
|
10.0 |
HIGH
|
webmin
|
webmin
|
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
|
NVD-CWE-Other
|
CVE-2001-1196
|
2016-10-18 11:14 |
2001-12-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363204
|
7.2 |
HIGH
|
timecop
|
wmcube_gdk
|
Buffer overflow in wmcube-gdk for WMCube/GDK 0.98 allows local users to execute arbitrary code via long lines in the object description file.
|
NVD-CWE-Other
|
CVE-2001-1201
|
2016-10-18 11:14 |
2001-12-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363205
|
7.5 |
HIGH
|
delegate
|
delegate
|
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on …
|
NVD-CWE-Other
|
CVE-2001-1202
|
2016-10-18 11:14 |
2001-12-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363206
|
5.0 |
MEDIUM
|
matrixs_cgi_vault
|
last_lines
|
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
|
CWE-22
パス・トラバーサル
|
CVE-2001-1205
|
2016-10-18 11:14 |
2001-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363207
|
7.5 |
HIGH
|
matrixs_cgi_vault
|
last_lines
|
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
|
NVD-CWE-Other
|
CVE-2001-1206
|
2016-10-18 11:14 |
2001-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363208
|
7.5 |
HIGH
|
daydream
|
daydream_bbs
|
Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.
|
NVD-CWE-Other
|
CVE-2001-1208
|
2016-10-18 11:14 |
2001-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363209
|
7.5 |
HIGH
|
icecast
libshout
|
icecast
libshout
|
Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2001-1229
|
2016-10-18 11:14 |
2001-03-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363210
|
7.5 |
HIGH
|
icecast
|
icecast
|
Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
|
NVD-CWE-Other
|
CVE-2001-1230
|
2016-10-18 11:14 |
2001-03-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363211
|
1.2 |
LOW
|
itcorp
|
ispell
|
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
|
NVD-CWE-Other
|
CVE-2001-1276
|
2016-10-18 11:14 |
2001-06-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363212
|
2.1 |
LOW
|
wolfram_schneider
|
makewhatis
|
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
|
NVD-CWE-Other
|
CVE-2001-1277
|
2016-10-18 11:14 |
2001-06-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363213
|
5.0 |
MEDIUM
|
mirabilis
|
icq
|
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is proces…
|
NVD-CWE-Other
|
CVE-2001-1305
|
2016-10-18 11:14 |
2001-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363214
|
5.0 |
MEDIUM
|
phpslash
|
phpslash
|
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
|
NVD-CWE-Other
|
CVE-2001-1334
|
2016-10-18 11:14 |
2002-05-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363215
|
7.5 |
HIGH
|
namazu
|
namazu
|
Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter.
|
NVD-CWE-Other
|
CVE-2001-1350
|
2016-10-18 11:14 |
2001-11-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363216
|
2.6 |
LOW
|
aladdin_enterprises
|
ghostscript
|
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
|
NVD-CWE-Other
|
CVE-2001-1353
|
2016-10-18 11:14 |
2001-09-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363217
|
10.0 |
HIGH
|
phplib_team
|
phplib
|
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malic…
|
NVD-CWE-Other
|
CVE-2001-1370
|
2016-10-18 11:14 |
2001-07-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363218
|
7.5 |
HIGH
|
oracle
|
application_server
|
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manage…
|
NVD-CWE-noinfo
CWE-264
認可・権限・アクセス制御
|
CVE-2001-1371
|
2016-10-18 11:14 |
2002-02-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363219
|
7.2 |
HIGH
|
linux
|
linux_kernel
|
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, su…
|
NVD-CWE-Other
|
CVE-2001-1384
|
2016-10-18 11:14 |
2001-10-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363220
|
5.0 |
MEDIUM
|
php
mandrakesoft
|
php
mandrake_linux
|
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the sour…
|
NVD-CWE-Other
|
CVE-2001-1385
|
2016-10-18 11:14 |
2001-01-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363221
|
7.5 |
HIGH
|
xinetd
|
xinetd
|
Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer over…
|
NVD-CWE-Other
|
CVE-2001-1389
|
2016-10-18 11:14 |
2001-08-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363222
|
7.5 |
HIGH
|
intel
|
high-bandwidth_digital_content_protection
|
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new devi…
|
NVD-CWE-Other
|
CVE-2001-0903
|
2016-10-18 11:13 |
2001-11-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363223
|
7.5 |
HIGH
|
network_solutions
|
rwhoisd
|
Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request tha…
|
NVD-CWE-Other
|
CVE-2001-0913
|
2016-10-18 11:13 |
2001-11-22 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363224
|
7.2 |
HIGH
|
berkeley
|
pmake
|
Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.
|
NVD-CWE-Other
|
CVE-2001-0915
|
2016-10-18 11:13 |
2001-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363225
|
7.2 |
HIGH
|
berkeley
|
pmake
|
Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition.
|
NVD-CWE-Other
|
CVE-2001-0916
|
2016-10-18 11:13 |
2001-11-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363226
|
7.5 |
HIGH
|
gnome
|
libgtop_daemon
|
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format spec…
|
NVD-CWE-Other
|
CVE-2001-0927
|
2016-10-18 11:13 |
2001-11-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363227
|
7.5 |
HIGH
|
gnome
|
libgtop_daemon
|
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
|
NVD-CWE-Other
|
CVE-2001-0928
|
2016-10-18 11:13 |
2001-11-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363228
|
7.5 |
HIGH
|
sendpage
|
sendpage.pl
|
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters.
|
NVD-CWE-Other
|
CVE-2001-0930
|
2016-10-18 11:13 |
2001-11-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363229
|
7.5 |
HIGH
|
cooolsoft
|
powerftp
|
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
|
NVD-CWE-Other
|
CVE-2001-0933
|
2016-10-18 11:13 |
2001-11-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363230
|
7.5 |
HIGH
|
cooolsoft
|
powerftp
|
Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.
|
NVD-CWE-Other
|
CVE-2001-0934
|
2016-10-18 11:13 |
2001-11-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363231
|
7.5 |
HIGH
|
matt_wright
|
pgpmail.pl
|
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.
|
NVD-CWE-Other
|
CVE-2001-0937
|
2016-10-18 11:13 |
2001-11-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363232
|
6.4 |
MEDIUM
|
persits
|
aspupload
|
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Fi…
|
NVD-CWE-Other
|
CVE-2001-0938
|
2016-10-18 11:13 |
2001-11-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363233
|
7.2 |
HIGH
|
khaled_mardam-bey
|
mirc
|
DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.
|
NVD-CWE-Other
|
CVE-2001-0944
|
2016-10-18 11:13 |
2001-12-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363234
|
5.0 |
MEDIUM
|
microsoft
|
outlook_express
|
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
|
NVD-CWE-Other
|
CVE-2001-0945
|
2016-10-18 11:13 |
2001-12-3 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363235
|
4.6 |
MEDIUM
|
oracle
|
database_server
|
Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access.
|
NVD-CWE-Other
|
CVE-2001-0831
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363236
|
2.1 |
LOW
|
oracle
|
database_server
|
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log direc…
|
NVD-CWE-Other
|
CVE-2001-0832
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363237
|
7.5 |
HIGH
|
ikonboard.com
|
ikonboard
|
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cooki…
|
NVD-CWE-Other
|
CVE-2001-0841
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363238
|
7.5 |
HIGH
|
leoboard
|
lb5000
|
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amemberna…
|
NVD-CWE-Other
|
CVE-2001-0842
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363239
|
7.5 |
HIGH
|
seth_leonard
|
book_of_guests
post_it
|
Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.
|
NVD-CWE-Other
|
CVE-2001-0844
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363240
|
4.6 |
MEDIUM
|
e-zone_media
|
fuse_talk
|
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.
|
NVD-CWE-Other
|
CVE-2001-0848
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363241
|
5.0 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.…
|
NVD-CWE-Other
|
CVE-2001-0854
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363242
|
7.2 |
HIGH
|
rational_software
|
clearcase
|
Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.
|
NVD-CWE-Other
|
CVE-2001-0855
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363243
|
4.6 |
MEDIUM
|
ibm
|
4758
|
Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack t…
|
NVD-CWE-Other
|
CVE-2001-0856
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363244
|
4.6 |
MEDIUM
|
caldera
|
unixware
openunix
|
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2001-0858
|
2016-10-18 11:12 |
2001-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363245
|
5.0 |
MEDIUM
|
opera_software
|
opera_web_browser
|
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to …
|
NVD-CWE-Other
|
CVE-2001-0898
|
2016-10-18 11:12 |
2001-11-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363246
|
7.5 |
HIGH
|
trend_micro
|
virus_buster_2001
|
Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header.
|
NVD-CWE-Other
|
CVE-2001-0410
|
2016-10-18 11:11 |
2001-06-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363247
|
5.0 |
MEDIUM
|
siemens
|
reliant_unix
|
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packe…
|
NVD-CWE-Other
|
CVE-2001-0411
|
2016-10-18 11:11 |
2001-06-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363248
|
7.5 |
HIGH
|
oracle
|
application_server
|
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands …
|
NVD-CWE-Other
|
CVE-2001-0419
|
2016-10-18 11:11 |
2001-07-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363249
|
7.2 |
HIGH
|
timecop
freebsd
|
bubblemon
freebsd
|
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
|
NVD-CWE-Other
|
CVE-2001-0424
|
2016-10-18 11:11 |
2001-07-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
363250
|
7.5 |
HIGH
|
micheal_lamont
|
savant_webserver
|
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
|
NVD-CWE-Other
|
CVE-2001-0433
|
2016-10-18 11:11 |
2001-06-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
