CVE-2001-1440

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://securitytracker.com/id?1003038
http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=onlyVendor Advisory
http://www.kb.cert.org/vuls/id/249491US Government Resource
http://www.securityfocus.com/bid/6839
https://exchange.xforce.ibmcloud.com/vulnerabilities/8269
http://securitytracker.com/id?1003038
http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=onlyVendor Advisory
http://www.kb.cert.org/vuls/id/249491US Government Resource
http://www.securityfocus.com/bid/6839
https://exchange.xforce.ibmcloud.com/vulnerabilities/8269

Timeline

Published: Dec 21, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14416.8Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clien CVE-2001-14424.6Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c c CVE-2001-14435.0KTH Kerberos IV and Kerberos V (Heimdal) for Telnet clients do not encrypt connections if the server does not support the requested encrypti CVE-2001-14447.5The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption opt CVE-2001-14457.5Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via cr CVE-2001-14467.5Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote a CVE-2001-14477.2NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent item CVE-2001-14484.6Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symli CVE-2001-14497.5The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers CVE-2001-14502.6Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#CVE-2001-14515.0Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, all CVE-2001-14527.5By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows