By publication date
Exploited and new serious CVEs: March 2001
11 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-1999-0681Proof of concept | Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackersmicrosoft · frontpage | Medium5.0 | — | 20.4% | Mar 12, 2001 |
26Monitor | CVE-1999-0945No exploit | Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service viamicrosoft · exchange server · CWE-120 | Medium5.0 | — | 19.5% | Mar 12, 2001 |
25Monitor | CVE-2001-0017No exploit | Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malfmicrosoft · windows nt | Medium5.0 | — | 17.3% | Mar 12, 2001 |
43Plan | CVE-2001-0113Proof of concept | statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used aomnicron · omnihttpd | Critical10.0 | — | 10.3% | Mar 12, 2001 |
44Plan | CVE-2001-0129Proof of concept | Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrartinyproxy · tinyproxy | Critical10.0 | — | 13.8% | Mar 12, 2001 |
33Monitor | CVE-2001-0136Proof of concept | Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanproftpd · proftpd · CWE-401 | Medium5.0 | — | 44.9% | Mar 12, 2001 |
27Monitor | CVE-2001-0137Proof of concept | Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a smicrosoft · windows media player | Medium5.1 | — | 22.1% | Mar 12, 2001 |
50Plan | CVE-2001-0144Proof of concept | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an inssh · ssh | Critical10.0 | — | 32.4% | Mar 12, 2001 |
43Plan | CVE-2001-0925Proof of concept | The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via anapache · http server · CWE-22 | Medium5.0 | — | 75.2% | Mar 12, 2001 |
44Plan | CVE-2001-0197Proof of concept | Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.icecast · icecast | Critical10.0 | — | 13.1% | Mar 26, 2001 |
44Plan | CVE-2001-0233Proof of concept | Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commanmatthew smith · micq | Critical10.0 | — | 14.5% | Mar 26, 2001 |
- CVE-1999-068126Monitor
Buffer overflow in Microsoft FrontPage Server Extensions (PWS) 3.0.2.926 on Windows 95, and possibly other versions, allows remote attackers
MediumCVSS 5.0Proof of conceptEPSS 20%microsoft · frontpageMar 12, 2001
- CVE-1999-094526Monitor
Buffer overflow in Internet Mail Service (IMS) for Microsoft Exchange 5.5 and 5.0 allows remote attackers to conduct a denial of service via
MediumCVSS 5.0No exploitEPSS 19%microsoft · exchange serverMar 12, 2001
- CVE-2001-001725Monitor
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malf
MediumCVSS 5.0No exploitEPSS 17%microsoft · windows ntMar 12, 2001
- CVE-2001-011343Plan
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used a
CriticalCVSS 10.0Proof of conceptEPSS 10%omnicron · omnihttpdMar 12, 2001
- CVE-2001-012944Plan
Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrar
CriticalCVSS 10.0Proof of conceptEPSS 13%tinyproxy · tinyproxyMar 12, 2001
- CVE-2001-013633Monitor
Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE comman
MediumCVSS 5.0Proof of conceptEPSS 44%proftpd · proftpdMar 12, 2001
- CVE-2001-013727Monitor
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a s
MediumCVSS 5.1Proof of conceptEPSS 22%microsoft · windows media playerMar 12, 2001
- CVE-2001-014450Plan
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in
CriticalCVSS 10.0Proof of conceptEPSS 32%ssh · sshMar 12, 2001
- CVE-2001-092543Plan
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an
MediumCVSS 5.0Proof of conceptEPSS 75%apache · http serverMar 12, 2001
- CVE-2001-019744Plan
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
CriticalCVSS 10.0Proof of conceptEPSS 13%icecast · icecastMar 26, 2001
- CVE-2001-023344Plan
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary comman
CriticalCVSS 10.0Proof of conceptEPSS 14%matthew smith · micqMar 26, 2001