CVE-2001-1366

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jul 19, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-136710.0The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative acceCVE-2001-13685.0Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrCVE-2001-13697.5Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account CVE-2001-137010.0prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTCVE-2001-13717.5The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by defaulCVE-2001-13725.0Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a nCVE-2001-13735.0MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, whiCVE-2001-13747.2expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges viCVE-2001-13754.6tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local uCVE-2001-13767.5Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and pCVE-2001-13775.0Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers tCVE-2001-13782.1fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
CVE-2001-1366: Medium severity, CVSS 5.0 | Vulnix