Total
304758 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2001-0206 | 1 Soft Lite | 1 Serverworx | 2008-09-05 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request. | |||||
CVE-2001-0225 | 1 Lenzo | 1 Infobot | 2008-09-05 | 10.0 HIGH | N/A |
fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters. | |||||
CVE-2001-0200 | 1 Heat-on Software | 1 Hsweb | 2008-09-05 | 5.0 MEDIUM | N/A |
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled. | |||||
CVE-2001-0275 | 1 Moby | 1 Netsuite Web Server | 2008-09-05 | 2.1 LOW | N/A |
Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request. | |||||
CVE-2001-0297 | 1 Dattaraj Rao | 1 Simple Server | 2008-09-05 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. | |||||
CVE-2001-0287 | 1 Symantec Veritas | 1 Cluster Server | 2008-09-05 | 2.1 LOW | N/A |
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command. | |||||
CVE-2001-0294 | 1 Typsoft | 1 Typsoft Ftp Server | 2008-09-05 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command. | |||||
CVE-2001-0161 | 1 Cisco | 1 Aironet | 2008-09-05 | 5.0 MEDIUM | N/A |
Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks. | |||||
CVE-2001-0075 | 1 Technote Inc | 1 Technote | 2008-09-05 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter. | |||||
CVE-2001-0202 | 1 Informs | 1 Picserver | 2008-09-05 | 5.0 MEDIUM | N/A |
Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request. | |||||
CVE-2001-0288 | 1 Cisco | 1 Ios | 2008-09-05 | 7.5 HIGH | N/A |
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. | |||||
CVE-2001-0093 | 1 Freebsd | 1 Freebsd | 2008-09-05 | 7.2 HIGH | N/A |
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd. | |||||
CVE-2001-0320 | 1 Francisco Burzi | 1 Php-nuke | 2008-09-05 | 10.0 HIGH | N/A |
bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument. | |||||
CVE-2001-0155 | 1 Van Dyke Technologies | 1 Vshell | 2008-09-05 | 7.5 HIGH | N/A |
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers. | |||||
CVE-2001-0390 | 1 Ibm | 3 Net.commerce, Net.commerce Hosting Server, Websphere Application Server | 2008-09-05 | 5.0 MEDIUM | N/A |
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters. | |||||
CVE-2001-0285 | 1 A1webserver | 1 Http Server | 2008-09-05 | 10.0 HIGH | N/A |
Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request. | |||||
CVE-2001-0272 | 1 W3.org | 1 Sendtemp.pl | 2008-09-05 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter. | |||||
CVE-2001-0290 | 1 Gnu | 1 Mailman | 2008-09-05 | 4.6 MEDIUM | N/A |
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. | |||||
CVE-2001-0019 | 1 Cisco | 2 Arrowpoint, Content Services Switch | 2008-09-05 | 2.1 LOW | N/A |
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands. | |||||
CVE-2001-0227 | 1 Biblioscape | 1 Biblioweb Server | 2008-09-05 | 5.0 MEDIUM | N/A |
Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request. |