Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2001

22 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-1453
    33Monitor

    Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host paramete

    HighCVSS 7.5No exploitEPSS 11%

    oracle · mysqlFeb 9, 2001

  • CVE-2000-1090
    25Monitor

    Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses t

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · internet information serverFeb 12, 2001

  • CVE-2001-0004
    28Monitor

    IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested

    MediumCVSS 5.0No exploitEPSS 28%

    microsoft · internet information serverFeb 12, 2001

  • CVE-2001-0008
    44Plan

    Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    borland software · interbaseFeb 12, 2001

  • CVE-2001-0010
    49Plan

    Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.

    CriticalCVSS 10.0Proof of conceptEPSS 31%

    isc · bindFeb 12, 2001

  • CVE-2001-0013
    43Plan

    Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.

    CriticalCVSS 10.0No exploitEPSS 10%

    isc · bindFeb 12, 2001

  • CVE-2001-0014
    24Monitor

    Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attacker

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · windows 2000Feb 12, 2001

  • CVE-2001-0022
    44Plan

    simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    leif m. wright · simplestguest.cgiFeb 12, 2001

  • CVE-2001-0023
    44Plan

    everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config p

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    leif m. wright · everythingform.cgiFeb 12, 2001

  • CVE-2001-0025
    44Plan

    ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    leif m. wright · ad.cgiFeb 12, 2001

  • CVE-2001-0053
    45Plan

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    david madore · ftpd-bsdFeb 12, 2001

  • CVE-2001-0083
    25Monitor

    Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memor

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · windows media servicesFeb 12, 2001

  • CVE-2001-0096
    26Monitor

    FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Ma

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · internet information serverFeb 12, 2001

  • CVE-2001-0098
    64This week

    Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a

    CriticalCVSS 10.0Proof of conceptEPSS 78%

    bea · weblogic serverFeb 12, 2001

  • CVE-2001-0099
    44Plan

    bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    brian stanback · bsguest.cgiFeb 12, 2001

  • CVE-2001-0100
    45Plan

    bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    brian stanback · bslist.cgiFeb 12, 2001

  • CVE-2001-0021
    44Plan

    MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    endymion · mailman webmailFeb 16, 2001

  • CVE-2001-0041
    35Monitor

    Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of fail

    HighCVSS 7.8Proof of conceptEPSS 12%

    cisco · catosFeb 16, 2001

  • CVE-2001-0050
    44Plan

    Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    colten edwards · bitchxFeb 16, 2001

  • CVE-2001-0054
    24Monitor

    Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appen

    MediumCVSS 5.0Proof of conceptEPSS 12%

    solarwinds · serv-u file serverFeb 16, 2001

  • CVE-2001-0089
    14Monitor

    Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form

    LowCVSS 2.6Proof of conceptEPSS 14%

    microsoft · internet explorerFeb 16, 2001

  • CVE-2001-0092
    14Monitor

    A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remot

    LowCVSS 2.6No exploitEPSS 12%

    microsoft · internet explorerFeb 16, 2001