CVE-2001-0104

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Feb 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-01052.1Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group.CVE-2001-01065.0Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a s CVE-2001-01075.0Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, wh CVE-2001-01085.0PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unres CVE-2001-01091.2rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.CVE-2001-01107.2Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.CVE-2001-01117.2Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.CVE-2001-01127.2Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.CVE-2001-011310.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used a CVE-2001-01145.0statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.CVE-2001-01157.2Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.CVE-2001-01161.2gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.