Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2001-06-02 CVE-2001-0255 Directory Traversal vulnerability in Fastream FTP++
FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g.
network
low complexity
fastream
5.0
2001-06-02 CVE-2001-0254 Remote Security vulnerability in Fastream Ftp++ Server 2.0
FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.
network
low complexity
fastream
5.0
2001-06-02 CVE-2001-0253 Directory Traversal vulnerability in Iweb Systems Hyperseek 2000
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a ..
network
low complexity
iweb-systems
5.0
2001-06-02 CVE-2001-0252 Unspecified vulnerability in Iplanet Enterprise Server 4.1Sp5
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
network
low complexity
iplanet
5.0
2001-06-02 CVE-2001-0251 Unspecified vulnerability in Netscape Enterprise Server 3.0
The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.
network
low complexity
netscape
5.0
2001-06-02 CVE-2001-0250 Unspecified vulnerability in Netscape Enterprise Server 3.0/4.0
The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
network
low complexity
netscape
5.0
2001-06-02 CVE-2001-0230 Local Security vulnerability in Freebsd 0.41
Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.
local
low complexity
freebsd
4.6
2001-06-02 CVE-2001-0224 Path Disclosure vulnerability in Brightstation Muscat Empower 1.0
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
network
low complexity
brightstation
5.0
2001-06-02 CVE-2001-0217 Remote Command Execution vulnerability in Mnscu Pals Webpals 1.0
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a ..
network
low complexity
mnscu-pals
5.0
2001-06-02 CVE-2001-0215 Unspecified vulnerability in Martin Hamilton Roads 2.3
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
network
low complexity
martin-hamilton
5.0