CVE-2001-0133

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The web administration interface for Interscan VirusWall 3.6.x and earlier does not use encryption, which could allow remote attackers to obtain the administrator password to sniff the administrator password via the setpasswd.cgi program or other HTTP GET requests that contain base64 encoded usernames and passwords.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-013410.0Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and ManagementCVE-2001-01352.1The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, whicCVE-2001-01365.0Memory leak in ProFTPd 1.2.0rc2 allows remote attackers to cause a denial of service via a series of USER commands, and possibly SIZE commanCVE-2001-01375.1Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a sCVE-2001-01381.2privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-01391.2inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-01401.2arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-01411.2mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-01421.2squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-01431.2vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-014410.0CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an inCVE-2001-01457.5Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a mal