CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001(Gain Privilege)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2001-1577 +Priv 2001-12-31 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.
2 CVE-2001-1562 +Priv 2001-12-31 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.
3 CVE-2001-1557 Overflow +Priv 2001-12-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges.
4 CVE-2001-1546 +Priv 2001-12-31 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.
5 CVE-2001-1537 +Priv +Info 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
The default "basic" security setting' in config.php for TWIG webmail 2.7.4 and earlier stores cleartext usernames and passwords in cookies, which could allow attackers to obtain authentication information and gain privileges.
6 CVE-2001-1509 +Priv 2001-12-31 2017-10-11
4.6
 None Local Low Not required Partial Partial Partial
geteuid in Itanium Architecture (IA) running on HP-UX 11.20 does not properly identify a user's effective user id, which could allow local users to gain privileges.
7 CVE-2001-1481 +Priv 2001-12-31 2017-07-11
10.0
 None Remote Low Not required Complete Complete Complete
Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges.
8 CVE-2001-1447 +Priv 2001-10-17 2017-07-11
7.2
 None Local Low Not required Complete Complete Complete
NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications to run with root privileges.
9 CVE-2001-1442 Overflow +Priv 2001-04-21 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
10 CVE-2001-1433 +Priv 2001-12-29 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
11 CVE-2001-1425 +Priv 2001-04-10 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
12 CVE-2001-1423 +Priv 2001-10-10 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.
13 CVE-2001-1404 +Priv 2001-09-10 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
14 CVE-2001-1403 +Priv 2001-09-10 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.
15 CVE-2001-1384 +Priv 2001-10-18 2016-10-18
7.2
 None Local Low Not required Complete Complete Complete
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
16 CVE-2001-1374 +Priv 2001-07-19 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
17 CVE-2001-1367 +Priv 2001-07-19 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
18 CVE-2001-1363 +Priv 2001-07-19 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.
19 CVE-2001-1358 +Priv 2001-02-07 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.
20 CVE-2001-1349 DoS +Priv 2001-05-28 2008-09-05
3.7
 None Local High Not required Partial Partial Partial
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
21 CVE-2001-1347 DoS +Priv 2001-05-24 2019-04-30
4.6
 None Local Low Not required Partial Partial Partial
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.
22 CVE-2001-1345 +Priv 2001-06-05 2017-10-10
4.6
 None Local Low Not required Partial Partial Partial
bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program.
23 CVE-2001-1336 +Priv 2001-05-28 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.
24 CVE-2001-1330 Overflow +Priv 2001-06-11 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
25 CVE-2001-1329 Overflow +Priv 2001-06-11 2017-04-29
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
26 CVE-2001-1327 +Priv 2001-05-24 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
pmake before 2.1.35 in Turbolinux 6.05 and earlier is installed with setuid root privileges, which could allow local users to gain privileges by exploiting vulnerabilities in pmake or programs that are used by pmake.
27 CVE-2001-1324 +Priv 2001-06-26 2008-09-10
4.6
 None Local Low Not required Partial Partial Partial
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
28 CVE-2001-1290 Exec Code +Priv 2001-06-28 2017-12-19
5.0
 None Remote Low Not required None Partial None
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
29 CVE-2001-1275 +Priv 2001-01-19 2019-10-07
7.2
 None Local Low Not required Complete Complete Complete
MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.
30 CVE-2001-1274 DoS Overflow +Priv 2001-01-23 2019-10-07
7.5
 None Remote Low Not required Partial Partial Partial
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
31 CVE-2001-1260 +Priv 2001-08-07 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.
32 CVE-2001-1223 +Priv 2001-12-26 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server.
33 CVE-2001-1220 +Priv 2001-12-21 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.
34 CVE-2001-1203 +Priv 2001-12-27 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
Format string vulnerability in gpm-root in gpm 1.17.8 through 1.17.18 allows local users to gain root privileges.
35 CVE-2001-1198 +Priv 2001-12-15 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
36 CVE-2001-1196 +Priv Dir. Trav. 2001-12-17 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
37 CVE-2001-1195 +Priv 2001-12-15 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Novell Groupwise 5.5 and 6.0 Servlet Gateway is installed with a default username and password for the servlet manager, which allows remote attackers to gain privileges.
38 CVE-2001-1185 +Priv 2001-12-10 2008-09-05
6.2
 None Local High Not required Complete Complete Complete
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
39 CVE-2001-1182 +Priv Bypass 2001-07-17 2017-10-11
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
40 CVE-2001-1181 +Priv 2001-07-16 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
41 CVE-2001-1180 +Priv 2001-07-10 2017-10-10
7.2
 None Local Low Not required Complete Complete Complete
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
42 CVE-2001-1179 +Priv 2001-07-17 2008-09-05
7.2
 None Local Low Not required Complete Complete Complete
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
43 CVE-2001-1178 Overflow +Priv 2001-07-11 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
44 CVE-2001-1173 +Priv 2001-07-26 2008-09-10
7.2
 None Local Low Not required Complete Complete Complete
Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
45 CVE-2001-1169 +Priv 2001-09-02 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
46 CVE-2001-1148 Overflow +Priv 2001-06-13 2017-07-11
4.6
 None Local Low Not required Partial Partial Partial
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
47 CVE-2001-1142 +Priv 2001-07-12 2008-09-05
5.0
 None Remote Low Not required Partial None None
ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges.
48 CVE-2001-1107 +Priv 2001-07-26 2017-12-19
5.0
 None Remote Low Not required Partial None None
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
49 CVE-2001-1091 +Priv 2001-08-23 2017-12-19
7.2
 None Local Low Not required Complete Complete Complete
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
50 CVE-2001-1080 +Priv 2001-06-19 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
Total number of vulnerabilities : 220   Page : 1 (This Page)2 3 4 5
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.