CVE-2001-1094

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Sep 11, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-10954.6Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.CVE-2001-10964.6Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.CVE-2001-10975.0Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.CVE-2001-10982.1Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain CVE-2001-10995.0The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file CVE-2001-11007.5sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharac CVE-2001-11016.4The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files CVE-2001-11026.2Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy CVE-2001-11037.5FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, CVE-2001-11047.5SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.CVE-2001-11057.5RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attac CVE-2001-11067.5The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwo