2001 CVE Vulnerabilities

1,556 CVEs published in 2001.

CVE IDSeverityCVSSDescription
CVE-2001-1409dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local us...
CVE-2001-1451Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler...
CVE-2001-1300Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files vi...
CVE-2001-1340Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the...
CVE-2001-1334Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrar...
CVE-2001-1175vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it ea...
CVE-2001-1174Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
CVE-2001-1165Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain priv...
CVE-2001-1171Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compi...
CVE-2001-1222Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing th...
CVE-2001-1377Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allow...
CVE-2001-1376Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a den...
CVE-2001-1465SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local us...
CVE-2001-1079create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissio...
CVE-2001-1058The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by ...
CVE-2001-1372Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root v...
CVE-2001-1371The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy ap...
CVE-2001-0891Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user t...
CVE-2001-1457Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_U...
CVE-2001-0887xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.
CVE-2001-1208Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifie...
CVE-2001-1477The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote d...
CVE-2001-1209Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the f...
CVE-2001-1479smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink a...
CVE-2001-1488Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which a...

Check if your code is affected by 2001 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now