Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2001

23 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2001-0238
    34Monitor

    Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restri

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · windows 2000Jul 2, 2001

  • CVE-2001-0239
    38Monitor

    Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web

    HighCVSS 7.5Proof of conceptEPSS 27%

    microsoft · isa serverJul 2, 2001

  • CVE-2001-0400
    35Monitor

    nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.

    HighCVSS 7.5Proof of conceptEPSS 16%

    matt tourtillott · nph-maillistJul 2, 2001

  • CVE-2001-0405
    33Monitor

    ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT c

    HighCVSS 7.5Proof of conceptEPSS 10%

    linux · linux kernelJul 2, 2001

  • CVE-2001-0419
    37Monitor

    Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.

    HighCVSS 7.5Proof of conceptEPSS 24%

    oracle · application serverJul 2, 2001

  • CVE-2001-0432
    43Plan

    Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attacker

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    trend micro · interscan viruswallJul 2, 2001

  • CVE-2001-1243
    41Plan

    Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) vi

    MediumCVSS 5.0Proof of conceptEPSS 70%

    microsoft · internet information serverJul 4, 2001

  • CVE-2001-1244
    27Monitor

    Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum

    MediumCVSS 5.0Proof of conceptEPSS 21%

    freebsd · freebsdJul 7, 2001

  • CVE-2001-1319
    30Monitor

    Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter ty

    MediumCVSS 5.0No exploitEPSS 33%

    microsoft · exchange serverJul 16, 2001

  • CVE-2001-1320
    50Plan

    Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via ex

    HighCVSS 7.5WeaponizedEPSS 68%

    pgp · keyserverJul 16, 2001

  • CVE-2001-0002
    36Monitor

    Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Loca

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · internet explorerJul 21, 2001

  • CVE-2001-0018
    25Monitor

    Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of se

    MediumCVSS 5.0No exploitEPSS 18%

    microsoft · windows 2000Jul 21, 2001

  • CVE-2001-0341
    39Monitor

    Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbit

    HighCVSS 7.5Proof of conceptEPSS 30%

    microsoft · frontpage server extensionsJul 21, 2001

  • CVE-2001-0347
    34Monitor

    Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user acc

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · windows 2000Jul 21, 2001

  • CVE-2001-0348
    26Monitor

    Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspa

    MediumCVSS 5.0Proof of conceptEPSS 18%

    microsoft · windows 2000Jul 21, 2001

  • CVE-2001-0499
    66This week

    Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges vi

    CriticalCVSS 10.0WeaponizedEPSS 85%

    oracle · oracle8iJul 21, 2001

  • CVE-2001-0500
    69This week

    Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attacke

    CriticalCVSS 10.0WeaponizedEPSS 96%

    microsoft · index serverJul 21, 2001

  • CVE-2001-0503
    25Monitor

    Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · netmeetingJul 21, 2001

  • CVE-2001-0537
    58Plan

    HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is

    CriticalCVSS 9.3WeaponizedEPSS 68%

    cisco · iosJul 21, 2001

  • CVE-2001-1370
    45Plan

    prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HT

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    phplib team · phplibJul 21, 2001

  • CVE-2001-1021
    43Plan

    Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD

    HighCVSS 7.5Proof of conceptEPSS 42%

    progress · ws ftp serverJul 26, 2001

  • CVE-2001-1022
    33Monitor

    Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the

    HighCVSS 7.5Proof of conceptEPSS 11%

    jgroff · jgroffJul 26, 2001

  • CVE-2001-1055
    27Monitor

    The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP requ

    MediumCVSS 5.0Proof of conceptEPSS 22%

    microsoft · windows 98Jul 30, 2001