Vulnerabilities (CVE)

Total 171162 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-1541 1 Bsdi 1 Bsd Os 2008-09-05 7.2 HIGH N/A
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
CVE-2001-1543 1 Axis 5 2100 Network Camera, 2110 Network Camera, 2120 Network Camera and 2 more 2008-09-05 7.5 HIGH N/A
Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera.
CVE-2001-1544 1 Macromedia 1 Jrun 2008-09-05 5.0 MEDIUM N/A
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
CVE-2001-1545 1 Macromedia 1 Jrun 2008-09-05 5.0 MEDIUM N/A
Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.
CVE-2001-1546 1 Mckesson 1 Pathways Homecare 2008-09-05 4.6 MEDIUM N/A
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.
CVE-2001-1547 1 Microsoft 1 Outlook Express 2008-09-05 7.5 HIGH N/A
Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code.
CVE-2001-1548 1 Zonelabs 1 Zonealarm 2008-09-05 2.1 LOW N/A
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
CVE-2001-1549 1 Tiny Software 1 Tiny Personal Firewall 2008-09-05 2.1 LOW N/A
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
CVE-2001-1551 1 Linux 1 Linux Kernel 2008-09-05 2.1 LOW N/A
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs.
CVE-2001-1553 1 University Of California 1 Seti At Home 2008-09-05 4.6 MEDIUM N/A
Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE.
CVE-2001-1554 1 Ibm 1 Aix 2008-09-05 5.0 MEDIUM N/A
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
CVE-2001-1557 1 Ibm 1 Aix 2008-09-05 7.5 HIGH N/A
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
CVE-2001-1558 1 Snort 1 Snort 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in IP defragmenter (frag2) in Snort before 1.8.3 allows attackers to cause a denial of service (crash).
CVE-2001-1559 1 Openbsd 1 Openbsd 2008-09-05 2.1 LOW N/A
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
CVE-2001-1561 2 Debian, John Bovey 2 Debian Linux, Xvt 2008-09-05 7.2 HIGH N/A
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
CVE-2001-1565 1 Apple 1 Mac Os X 2008-09-05 2.1 LOW N/A
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
CVE-2001-1566 2 Vanessa, Verge 2 Vanessa Logger, Perdition 2008-09-05 7.5 HIGH N/A
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
CVE-2001-1568 1 Cmg 1 Wap Gateway 2008-09-05 6.4 MEDIUM N/A
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
CVE-2001-1569 1 Cmg 1 Openwave Wap Gateway 2008-09-05 6.4 MEDIUM N/A
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
CVE-2001-1570 1 Microsoft 1 Windows Xp 2008-09-05 2.1 LOW N/A
Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user (self) multiple times, which causes other accounts to be locked out.