By publication date
Exploited and new serious CVEs: October 2001
15 records · 0 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2001-0731Proof of concept | Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the apache · http server | Medium5.0 | — | 56.7% | Oct 1, 2001 |
45Plan | CVE-2001-0746Proof of concept | Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of serviiplanet · iplanet web server | Critical10.0 | — | 15.1% | Oct 18, 2001 |
35Monitor | CVE-2001-0763Proof of concept | Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, wdebian · debian linux | High7.5 | — | 17.1% | Oct 18, 2001 |
35Monitor | CVE-2001-0775Proof of concept | Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imagxli · xli · CWE-119 | High7.5 | — | 16.3% | Oct 18, 2001 |
59Plan | CVE-2001-0779Proof of concept | Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.sun · solaris | Critical10.0 | — | 62.1% | Oct 18, 2001 |
30Monitor | CVE-2001-0505No exploit | Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a largemicrosoft · services | Medium5.0 | — | 33.3% | Oct 30, 2001 |
41Plan | CVE-2001-0540No exploit | Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via microsoft · terminal server | Medium5.0 | — | 71.2% | Oct 30, 2001 |
25Monitor | CVE-2001-0545No exploit | IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a lmicrosoft · internet information server | Medium5.0 | — | 18.3% | Oct 30, 2001 |
27Monitor | CVE-2001-0660No exploit | Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direcmicrosoft · exchange server | Medium5.0 | — | 21.9% | Oct 30, 2001 |
27Monitor | CVE-2001-0662No exploit | RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.microsoft · windows nt | Medium5.0 | — | 22.5% | Oct 30, 2001 |
35Monitor | CVE-2001-0664Proof of concept | Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses,microsoft · internet explorer | High7.5 | — | 18.1% | Oct 30, 2001 |
34Monitor | CVE-2001-0665No exploit | Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from microsoft · ie | High7.5 | — | 12.0% | Oct 30, 2001 |
33Monitor | CVE-2001-0667No exploit | Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commandmicrosoft · internet explorer · CWE-88 | High7.3 | — | 14.6% | Oct 30, 2001 |
33Monitor | CVE-2001-0718No exploit | Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restricmicrosoft · excel | High7.5 | — | 11.0% | Oct 30, 2001 |
24Monitor | CVE-2001-0730No exploit | split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with apache · http server | Medium5.0 | — | 11.9% | Oct 30, 2001 |
- CVE-2001-073137Monitor
Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the
MediumCVSS 5.0Proof of conceptEPSS 56%apache · http serverOct 1, 2001
- CVE-2001-074645Plan
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of servi
CriticalCVSS 10.0Proof of conceptEPSS 15%iplanet · iplanet web serverOct 18, 2001
- CVE-2001-076335Monitor
Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, w
HighCVSS 7.5Proof of conceptEPSS 17%debian · debian linuxOct 18, 2001
- CVE-2001-077535Monitor
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format imag
HighCVSS 7.5Proof of conceptEPSS 16%xli · xliOct 18, 2001
- CVE-2001-077959Plan
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.
CriticalCVSS 10.0Proof of conceptEPSS 62%sun · solarisOct 18, 2001
- CVE-2001-050530Monitor
Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large
MediumCVSS 5.0No exploitEPSS 33%microsoft · servicesOct 30, 2001
- CVE-2001-054041Plan
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via
MediumCVSS 5.0No exploitEPSS 71%microsoft · terminal serverOct 30, 2001
- CVE-2001-054525Monitor
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a l
MediumCVSS 5.0No exploitEPSS 18%microsoft · internet information serverOct 30, 2001
- CVE-2001-066027Monitor
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by direc
MediumCVSS 5.0No exploitEPSS 21%microsoft · exchange serverOct 30, 2001
- CVE-2001-066227Monitor
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
MediumCVSS 5.0No exploitEPSS 22%microsoft · windows ntOct 30, 2001
- CVE-2001-066435Monitor
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses,
HighCVSS 7.5Proof of conceptEPSS 18%microsoft · internet explorerOct 30, 2001
- CVE-2001-066534Monitor
Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from
HighCVSS 7.5No exploitEPSS 12%microsoft · ieOct 30, 2001
- CVE-2001-066733Monitor
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute command
HighCVSS 7.3No exploitEPSS 14%microsoft · internet explorerOct 30, 2001
- CVE-2001-071833Monitor
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restric
HighCVSS 7.5No exploitEPSS 11%microsoft · excelOct 30, 2001
- CVE-2001-073024Monitor
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with
MediumCVSS 5.0No exploitEPSS 11%apache · http serverOct 30, 2001