First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2001-0389

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jul 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03905.0IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long st CVE-2001-03915.0Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.CVE-2001-03925.0Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long stri CVE-2001-03935.0Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without provid CVE-2001-03945.0Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to CVE-2001-03959.8Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brut CVE-2001-03965.0The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive informa CVE-2001-03977.5Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary CVE-2001-03987.5The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attac CVE-2001-03995.0Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifi CVE-2001-04007.5nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.CVE-2001-04017.2Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.

CVE-2001-0389: Medium severity, CVSS 5.0 | Vulnix