Weekly Vulnerabilities Reports > July 23 to 29, 2001

Overview

16 new vulnerabilities reported during this period, including 1 critical vulnerabilities and 9 high severity vulnerabilities. This weekly summary report vulnerabilities in 17 products from 16 vendors including Snapstream, Cisco, Microsoft, IBM, and Sonicwall. Vulnerabilities are notably categorized as .

  • 11 reported vulnerabilities are remotely exploitables.
  • 16 reported vulnerabilities are exploitable by an anonymous user.
  • Snapstream has the most reported vulnerabilities, with 2 reported vulnerabilities.
  • Mambo has the most reported critical vulnerabilities, with 1 reported vulnerabilities.

TOTAL
VULNERABILITIES
CRITICAL RISK
VULNERABILITIES
HIGH RISK
VULNERABILITIES
MEDIUM RISK
VULNERABILITIES
LOW RISK
VULNERABILITIES
REMOTELY
EXPLOITABLE
LOCALLY
EXPLOITABLE
EXPLOIT
AVAILABLE
EXPLOITABLE
ANONYMOUSLY
AFFECTING
WEB APPLICATION

Vulnerability Details

The following table list reported vulnerabilities for the period covered by this report:

Expand/Hide

1 Critical Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2001-07-25 CVE-2001-1011 Mambo Unspecified vulnerability in Mambo Site Server

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
10.0

9 High Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2001-07-27 CVE-2001-1024 Entrust Remote Security vulnerability in GetAccess

login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.
7.5
2001-07-26 CVE-2001-1108 Snapstream Directory Traversal vulnerability in Snapstream PVS 1.2A

Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a ..
7.5
2001-07-26 CVE-2001-1022 GNU
Jgroff 		Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
7.5
2001-07-25 CVE-2001-1106 Sambar Unspecified vulnerability in Sambar Server

The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
7.5
2001-07-25 CVE-2001-1104 Sonicwall Unspecified vulnerability in Sonicwall Soho Firmware 4.0.0/5.0.0/5.1.5.0

SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
7.5
2001-07-24 CVE-2001-0991 Scott R Lemmon Cross-Site Scripting vulnerability in Proxomitron

Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.
7.5
2001-07-26 CVE-2001-1173 Masqmail Local Security vulnerability in MasqMail

Vulnerability in MasqMail before 0.1.15 allows local users to gain privileges via piped aliases.
7.2
2001-07-23 CVE-2001-0989 Richard Everitt Buffer Overflow vulnerability in Richard Everitt Pileup 1.1

Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
7.2
2001-07-23 CVE-2001-0988 Knox Software Unspecified vulnerability in Knox Software Arkeia

Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
7.2

4 Medium Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2001-07-29 CVE-2001-1289 ID Software Buffer Overflow vulnerability in Quake 3 Arena Possible

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.
5.0
2001-07-26 CVE-2001-1107 Snapstream Unspecified vulnerability in Snapstream PVS 1.2A

SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
5.0
2001-07-24 CVE-2001-1097 Cisco Denial of Service vulnerability in Cisco IOS UDP

Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
5.0
2001-07-23 CVE-2001-0982 IBM Directory Traversal vulnerability in IBM Tivoli SecureWay Policy Director

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded ..
5.0

2 Low Vulnerabilities

DATE CVE VENDOR VULNERABILITY CVSS
2001-07-27 CVE-2001-1288 Microsoft Unspecified vulnerability in Microsoft Windows 2000 and Windows NT

Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe.
2.1
2001-07-24 CVE-2001-0993 Netbsd Denial of Service vulnerability in NetBSD sendmsg

sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
2.1