CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   

Security Vulnerabilities Published In 2001(Execute Code)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2001-1584 20 Exec Code 2001-12-31 2017-07-29
7.5
 None Remote Low Not required Partial Partial Partial
CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
2 CVE-2001-1583 78 Exec Code 2001-12-31 2022-09-13
10.0
 None Remote Low Not required Complete Complete Complete
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
3 CVE-2001-1582 119 Exec Code Overflow 2001-12-31 2018-10-30
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
4 CVE-2001-1576 Exec Code Overflow 2001-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
5 CVE-2001-1574 Exec Code Overflow 2001-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code.
6 CVE-2001-1573 Exec Code Overflow 2001-12-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter.
7 CVE-2001-1566 Exec Code 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
8 CVE-2001-1561 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
9 CVE-2001-1553 Exec Code Overflow 2001-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in setiathome for [email protected] 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE.
10 CVE-2001-1547 Exec Code 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code.
11 CVE-2001-1542 Exec Code Bypass 2001-12-31 2011-03-08
7.5
 None Remote Low Not required Partial Partial Partial
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
12 CVE-2001-1541 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
13 CVE-2001-1531 DoS Exec Code Overflow 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
14 CVE-2001-1530 Exec Code 2001-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.
15 CVE-2001-1508 Exec Code Overflow 2001-12-31 2017-12-19
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.
16 CVE-2001-1504 Exec Code 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
17 CVE-2001-1502 Exec Code 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
18 CVE-2001-1498 Exec Code Overflow 2001-12-31 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
19 CVE-2001-1496 DoS Exec Code Overflow 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
20 CVE-2001-1495 Exec Code 2001-12-31 2017-07-19
7.5
 None Remote Low Not required Partial Partial Partial
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
21 CVE-2001-1494 Exec Code 2001-12-31 2017-10-11
2.1
 None Local Low Not required None Partial None
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
22 CVE-2001-1487 Exec Code 2001-12-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
popauth utility in Qualcomm Qpopper 4.0 and earlier allows local users to overwrite arbitrary files and execute commands as the pop user via a symlink attack on the -trace file option.
23 CVE-2001-1478 Exec Code Overflow 2001-12-31 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
24 CVE-2001-1472 Exec Code Sql 2001-08-03 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.
25 CVE-2001-1471 Exec Code 2001-07-31 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement.
26 CVE-2001-1468 Exec Code File Inclusion 2001-02-07 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code.
27 CVE-2001-1466 Exec Code Overflow 2001-12-30 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
28 CVE-2001-1459 Exec Code Bypass 2001-06-19 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
29 CVE-2001-1456 119 Exec Code Overflow 2001-09-04 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
30 CVE-2001-1454 Exec Code Overflow 2001-02-09 2019-10-07
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.
31 CVE-2001-1453 Exec Code Overflow 2001-02-09 2019-10-07
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.
32 CVE-2001-1448 Exec Code 2001-12-17 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts.
33 CVE-2001-1429 DoS Exec Code Overflow 2001-11-12 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.
34 CVE-2001-1389 DoS Exec Code Overflow 2001-08-29 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Multiple vulnerabilities in xinetd 2.3.0 and earlier, and additional variants until 2.3.3, may allow remote attackers to cause a denial of service or execute arbitrary code, primarily via buffer overflows or improper NULL termination.
35 CVE-2001-1375 Exec Code 2001-07-19 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
36 CVE-2001-1370 Exec Code 2001-07-21 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
37 CVE-2001-1369 Exec Code Bypass 2001-09-10 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.
38 CVE-2001-1355 Exec Code Overflow 2001-07-20 2017-12-19
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
39 CVE-2001-1343 Exec Code 2001-06-12 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
40 CVE-2001-1332 Exec Code Overflow 2001-05-10 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.
41 CVE-2001-1328 Exec Code Overflow 2001-06-22 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
42 CVE-2001-1326 Exec Code 2001-05-29 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments.
43 CVE-2001-1323 120 DoS Exec Code Overflow 2001-05-16 2021-11-04
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
44 CVE-2001-1321 DoS Exec Code 2001-07-16 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
45 CVE-2001-1320 DoS Exec Code Overflow 2001-07-16 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffer overflows), as demonstrated by the PROTOS LDAPv3 test suite.
46 CVE-2001-1318 DoS Exec Code 2001-07-16 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
47 CVE-2001-1317 DoS Exec Code 2001-07-16 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
48 CVE-2001-1316 DoS Exec Code Overflow 2001-07-16 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
49 CVE-2001-1315 DoS Exec Code 2001-07-16 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
50 CVE-2001-1314 DoS Exec Code Overflow 2001-07-16 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Total number of vulnerabilities : 403   Page : 1 (This Page)2 3 4 5 6 7 8 9
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.