Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0236
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
Affected Products: n/a
References: [{'name': 'solaris-snmpxdmid-bo(6245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6245'}, {'name': '20010314 Solaris /usr/lib/dmi/snmpXdmid vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98462536724454&w=2'}, {'name': '00207', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/207'}, {'name': '2417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2417'}, {'name': 'L-065', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-065.shtml'}, {'name': 'CA-2001-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-05.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0237
Memory leak in Microsoft 2000 domain controller allows remote attackers to cause a denial of service by repeatedly connecting to the Kerberos service and then disconnecting without sending any data.
Affected Products: n/a
References: [{'name': 'MS01-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-024'}, {'name': 'win2k-kerberos-dos(6506)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6506'}, {'name': '20010509 def-2001-24: Windows 2000 Kerberos DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98942093221908&w=2'}, {'name': 'L-079', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-079.shtml'}, {'name': '2707', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2707'}]
CVE State: PUBLISHED
Explain CVE-2001-0238
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
Affected Products: n/a
References: [{'name': 'L-074', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-074.shtml'}, {'name': 'MS01-022', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-022'}, {'name': 'ms-dacipp-webdav-access(6405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6405'}]
CVE State: PUBLISHED
Explain CVE-2001-0239
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
Affected Products: n/a
References: [{'name': '20010416 [SX-20010320-2] - Microsoft ISA Server Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/176912'}, {'name': '20010417 [SX-20010320-2b] - Followup re. Microsoft ISA Server Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/177160'}, {'name': 'MS01-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-021'}, {'name': '20010427 Microsoft ISA Server Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/179986'}, {'name': '2600', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2600'}, {'name': 'isa-web-proxy-dos(6383)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6383'}, {'name': 'L-073', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-073.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0240
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
Affected Products: n/a
References: [{'name': 'word-rtf-macro-execution(6571)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6571'}, {'name': '2753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2753'}, {'name': 'MS01-028', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028'}]
CVE State: PUBLISHED
Explain CVE-2001-0241
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
Affected Products: n/a
References: [{'name': '2674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2674'}, {'name': 'oval:org.mitre.oval:def:1068', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1068'}, {'name': '3323', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3323'}, {'name': 'iis-isapi-printer-bo(6485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6485'}, {'name': 'MS01-023', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-023'}, {'name': 'CA-2001-10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-10.html'}, {'name': '20010501 Windows 2000 IIS 5.0 Remote buffer overflow vulnerability (Remote SYSTEM Level Access)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98874912915948&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0242
Buffer overflows in Microsoft Windows Media Player 7 and earlier allow remote attackers to execute arbitrary commands via (1) a long version tag in an .ASX file, or (2) a long banner tag, a variant of the ".ASX Buffer Overrun" vulnerability as discussed in MS:MS00-090.
Affected Products: n/a
References: [{'name': 'VU#187528', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/187528'}, {'name': 'mediaplayer-asx-bo(5574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5574'}, {'name': '20010502 Microsoft Media Player ASX Parser buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/181419'}, {'name': '2686', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2686'}, {'name': '2677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2677'}, {'name': '20010506 Re: Microsoft Media Player ASX Parser buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/183906'}, {'name': 'MS01-029', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029'}]
CVE State: PUBLISHED
Explain CVE-2001-0243
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
Affected Products: n/a
References: [{'name': 'MS01-029', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029'}, {'name': 'mediaplayer-html-shortcut(6584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6584'}, {'name': '2765', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2765'}]
CVE State: PUBLISHED
Explain CVE-2001-0244
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
Affected Products: n/a
References: [{'name': 'MS01-025', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025'}, {'name': 'winnt-indexserver-search-bo(6517)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6517'}, {'name': '2709', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2709'}]
CVE State: PUBLISHED
Explain CVE-2001-0245
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
Affected Products: n/a
References: [{'name': 'MS01-025', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025'}, {'name': 'win-indexserver-view-files(6518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6518'}]
CVE State: PUBLISHED
Explain CVE-2001-0246
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.
Affected Products: n/a
References: [{'name': 'MS01-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027'}]
CVE State: PUBLISHED
Explain CVE-2001-0247
Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:33', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-04/0466.html'}, {'name': '2548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2548'}, {'name': '20010409 Globbing Vulnerabilities in Multiple FTP Daemons', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/048.asp'}, {'name': 'CA-2001-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-07.html'}, {'name': '20010802-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20010802-01-P'}, {'name': 'NetBSD-SA2000-018', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc'}, {'name': 'ftp-glob-expansion(6332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6332'}]
CVE State: PUBLISHED
Explain CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
Affected Products: n/a
References: [{'name': '20010409 Globbing Vulnerabilities in Multiple FTP Daemons', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/048.asp'}, {'name': '2552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2552'}, {'name': 'CA-2001-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-07.html'}, {'name': 'ftp-glob-expansion(6332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6332'}]
CVE State: PUBLISHED
Explain CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
Affected Products: n/a
References: [{'name': '20010409 Globbing Vulnerabilities in Multiple FTP Daemons', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/048.asp'}, {'name': 'CA-2001-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-07.html'}, {'name': '2550', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2550'}, {'name': 'ftp-glob-expansion(6332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6332'}]
CVE State: PUBLISHED
Explain CVE-2001-0250
The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
Affected Products: n/a
References: [{'name': '20010124 [SAFER] Security Bulletin 010124.EXP.1.11', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0396.html'}, {'name': '2285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2285'}, {'name': 'netscape-enterprise-list-directories(5997)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5997'}]
CVE State: PUBLISHED
Explain CVE-2001-0251
The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.
Affected Products: n/a
References: [{'name': 'netscape-enterprise-revlog-dos(6003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6003'}, {'name': '20010125 [SAFER] Security Bulletin 010125.DOS.1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0422.html'}, {'name': '2294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2294'}]
CVE State: PUBLISHED
Explain CVE-2001-0252
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
Affected Products: n/a
References: [{'name': '20010124 iPlanet FastTrack/Enterprise 4.1 DoS clarifications', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98035833331446&w=2'}, {'name': '20010122 def-2001-04: Netscape Enterprise Server Dot-DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/157641'}, {'name': '2282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2282'}, {'name': 'netscape-enterprise-dot-dos(5983)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5983'}]
CVE State: PUBLISHED
Explain CVE-2001-0253
Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.
Affected Products: n/a
References: [{'name': 'VU#146704', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/146704'}, {'name': '2314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2314'}, {'name': '20010128 Hyperseek 2000 Search Engine - "show directory & files" bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0463.html'}, {'name': 'hyperseek-cgi-reveal-info(6012)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6012'}]
CVE State: PUBLISHED
Explain CVE-2001-0254
FaSTream FTP++ Server 2.0 allows remote attackers to obtain the real pathname of the server via the "pwd" command.
Affected Products: n/a
References: [{'name': '20010119 Multiple Vulnerabilities In FaSTream FTP++ (+ ICS Tftpserver DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98021181215325&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0255
FaSTream FTP++ Server 2.0 allows remote attackers to list arbitrary directories by using the "ls" command and including the drive letter name (e.g. C:) in the requested pathname.
Affected Products: n/a
References: [{'name': 'fastream-ftp-path-disclosure(5977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5977'}, {'name': '20010119 Multiple Vulnerabilities In FaSTream FTP++ (+ ICS Tftpserver DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98021181215325&w=2'}, {'name': '2267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2267'}]
CVE State: PUBLISHED
Explain CVE-2001-0256
FaSTream FTP++ Server 2.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long username.
Affected Products: n/a
References: [{'name': '2261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2261'}, {'name': '20010119 Multiple Vulnerabilities In FaSTream FTP++ (+ ICS Tftpserver DoS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98021181215325&w=2'}, {'name': 'fastream-ftp-server-dos(5976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5976'}]
CVE State: PUBLISHED
Explain CVE-2001-0257
Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
Affected Products: n/a
References: [{'name': '20010123 def-2001-06: Easycom/Safecom 10/100 Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html'}, {'name': 'easycom-safecom-url-bo(5988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5988'}, {'name': '2291', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2291'}]
CVE State: PUBLISHED
Explain CVE-2001-0258
The Easycom/Safecom Print Server (firmware 404.590) PrintGuide server allows remote attackers to cause a denial of service via a large number of connections that send null characters.
Affected Products: n/a
References: [{'name': 'easycom-safecom-printguide-dos(5989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5989'}, {'name': '20010123 def-2001-06: Easycom/Safecom 10/100 Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ssh.com/products/ssh/patches/secureRPCvulnerability.html'}, {'name': '2222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2222'}, {'name': "20010116 Bug in SSH1 secure-RPC support can expose users' private keys", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html'}, {'name': 'ssh-rpc-private-key(5963)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5963'}]
CVE State: PUBLISHED
Explain CVE-2001-0260
Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.
Affected Products: n/a
References: [{'name': '2283', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2283'}, {'name': '20010123 [SAFER] Security Bulletin 010123.EXP.1.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.html'}, {'name': '3321', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3321'}, {'name': 'lotus-domino-smtp-bo(5993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5993'}]
CVE State: PUBLISHED
Explain CVE-2001-0261
Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
Affected Products: n/a
References: [{'name': '20010119 BugTraq: EFS Win 2000 flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97992179925715&w=2'}, {'name': '20010123 Reply to EFS note on Bugtraq', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98027311214976&w=2'}, {'name': '2243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2243'}, {'name': 'win2k-efs-recover-data(5973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5973'}]
CVE State: PUBLISHED
Explain CVE-2001-0262
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
Affected Products: n/a
References: [{'name': 'A041301-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a041301-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0263
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
Affected Products: n/a
References: [{'name': 'bpftp-obtain-credentials(6330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6330'}, {'name': 'A040301-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a040301-1.txt'}, {'name': '2537', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2537'}]
CVE State: PUBLISHED
Explain CVE-2001-0264
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Affected Products: n/a
References: [{'name': '2534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2534'}, {'name': 'A040301-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a040301-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.
Affected Products: n/a
References: [{'name': '2556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2556'}, {'name': '1782', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1782'}, {'name': 'A040901-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a040901-1.txt'}, {'name': 'pgp-armor-code-execution(6643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6643'}]
CVE State: PUBLISHED
Explain CVE-2001-0266
Vulnerability in Software Distributor SD-UX in HP-UX 11.0 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '6033', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6033'}, {'name': 'HPSBUX0102-143', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0069.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0267
NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBMP0102-008', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0050.html'}, {'name': '6032', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6032'}, {'name': 'hp-nmdebug-gain-privileges(6226)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6226'}]
CVE State: PUBLISHED
Explain CVE-2001-0268
The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows local users to gain root privileges by creating a segment call gate in the Local Descriptor Table (LDT) with a target that specifies an arbitrary kernel address.
Affected Products: n/a
References: [{'name': 'CSSA-2001-SCO.35', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html'}, {'name': 'NetBSD-SA:2001-002', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'http://archives.neohapsis.com/archives/netbsd/2001-q1/0093.html'}, {'name': 'VU#358960', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/358960'}, {'name': 'user-ldt-validation(6222)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6222'}, {'name': '2739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2739'}, {'name': '20010302 The USER_LDT kernel option allows an attacker to gain access to privileged areas of kernel memory.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#userldt'}, {'name': '20010219 Re: your mail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0353.html'}, {'name': '6141', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6141'}]
CVE State: PUBLISHED
Explain CVE-2001-0269
pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
Affected Products: n/a
References: [{'name': '20010217 Solaris 8 pam_ldap.so.1 module broken', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0344.html'}, {'name': '6030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6030'}, {'name': 'solaris-pamldap-bypass-authentication(6440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6440'}]
CVE State: PUBLISHED
Explain CVE-2001-0270
Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set.
Affected Products: n/a
References: [{'name': '20010219 Denial of Service Condition exists in Fore/Marconi ASX Switches', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0349.html'}, {'name': '2400', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2400'}]
CVE State: PUBLISHED
Explain CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
Affected Products: n/a
References: [{'name': '20010218 mailnews.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html'}, {'name': '2391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2391'}]
CVE State: PUBLISHED
Explain CVE-2001-0272
Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.
Affected Products: n/a
References: [{'name': '20010212 W3.ORG sendtemp.pl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0273
pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.
Affected Products: n/a
References: [{'name': '20010220 [CryptNET Advisory] pgp4pine-1.75-6 - expired public keys', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html'}, {'name': 'VU#566640', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/566640'}, {'name': '2405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2405'}, {'name': 'pgp4pine-expired-keys(6135)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6135'}]
CVE State: PUBLISHED
Explain CVE-2001-0274
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Affected Products: n/a
References: [{'name': 'kicq-execute-commands(6112)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6112'}, {'name': '20010303 Re: Security hole in kicq', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0536.html'}, {'name': '20010214 Security hole in kicq', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0276.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0275
Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.
Affected Products: n/a
References: [{'name': '20010219 NetSuite 1.02 web server vulnerabilty', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0346.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0276
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
Affected Products: n/a
References: [{'name': '20010217 BadBlue Web Server Ext.dll Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98263019502565&w=2'}, {'name': '2390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2390'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.badblue.com/p010219.htm'}, {'name': 'badblue-ext-reveal-path(6130)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6130'}]
CVE State: PUBLISHED
Explain CVE-2001-0277
Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '2392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2392'}, {'name': '20010217 BadBlue Web Server Ext.dll Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98263019502565&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0278
Vulnerability in linkeditor in HP MPE/iX 6.5 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'HPSBMP0102-009', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0050.html'}, {'name': 'hp-linkeditor-gain-privileges(6223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6223'}]
CVE State: PUBLISHED
Explain CVE-2001-0279
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'RHSA-2001:018', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-018.html'}, {'name': '20010222 Sudo version 1.6.3p6 now available (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0414.html'}, {'name': 'MDKSA-2001:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-024.php3'}, {'name': '20010225 [slackware-security] buffer overflow in sudo fixed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0437.html'}, {'name': 'DSA-031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-031'}, {'name': '20010226 Trustix Security Advisory - sudo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0427.html'}, {'name': 'CLA-2001:381', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000381'}, {'name': 'RHSA-2001:019', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-019.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0280
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.
Affected Products: n/a
References: [{'name': '6027', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6027'}, {'name': '20010223 Mercur Mailserver 3.3 buffer overflow with EXPN', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0413.html'}, {'name': 'mercur-expn-bo(6149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6149'}]
CVE State: PUBLISHED
Explain CVE-2001-0281
Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.
Affected Products: n/a
References: [{'name': '20010221 NT drivers are potentially vulnerable to format string bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0282
SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
Affected Products: n/a
References: [{'name': '20010223 SEDUM v2.1 HTTPd - Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0419.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0283
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.
Affected Products: n/a
References: [{'name': '20010302 Sunftp build9(1) - ftp server Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0284
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.
Affected Products: n/a
References: [{'name': '20010302 Insufficient checks in the IPSEC AH IPv4 option handling code can lead to a buffer overrun in the kernel.', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata.html#ipsec_ah'}, {'name': '6026', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6026'}]
CVE State: PUBLISHED
Explain CVE-2001-0285
Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
Affected Products: n/a
References: [{'name': '20010226 A1 Server v1.0a HTTPd (DoS & Dir Traversal)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0286
Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
Affected Products: n/a
References: [{'name': '20010226 A1 Server v1.0a HTTPd (DoS & Dir Traversal)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0287
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.
Affected Products: n/a
References: [{'name': '20010302 Option to VERITAS Cluster Server (VCS) lltstat command will panic system.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0528.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://seer.support.veritas.com/docs/234326.htm'}, {'name': '6025', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6025'}]
CVE State: PUBLISHED
Explain CVE-2001-0288
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
Affected Products: n/a
References: [{'name': '20010228 Cisco IOS Software TCP Initial Sequence Number Randomization Improvements', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0289
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory.
Affected Products: n/a
References: [{'name': 'RHSA-2001:024', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-024.html'}, {'name': "20010228 Joe's Own Editor File Handling Error", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html'}, {'name': 'DSA-041', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-041'}, {'name': 'MDKSA-2001:026', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3'}]
CVE State: PUBLISHED
Explain CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.
Affected Products: n/a
References: [{'name': '20010306 [Mailman-Announce] ANNOUNCE Mailman 2.0.2 (important privacy patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0291
Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters.
Affected Products: n/a
References: [{'name': '20010305 Remote buffer overflow condition in post-query (CGI).', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0003.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0292
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
Affected Products: n/a
References: [{'name': '20010302 PHPNUKE4.4.1a Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0293
Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.
Affected Products: n/a
References: [{'name': '20010228 Vulnerability in FtpXQ Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html'}, {'name': '2426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2426'}]
CVE State: PUBLISHED
Explain CVE-2001-0294
Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command.
Affected Products: n/a
References: [{'name': '20010228 Vulnerability in TYPSoft FTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0295
Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command.
Affected Products: n/a
References: [{'name': '874', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/874'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.jgaa.com/?cmd=ShowArticle&ID=31'}, {'name': '20010306 Warftp 1.67b04 Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98390925726814&w=2'}, {'name': '2444', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2444'}]
CVE State: PUBLISHED
Explain CVE-2001-0296
Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.
Affected Products: n/a
References: [{'name': '20010303 WFTPD Pro 3.00 R1 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0297
Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected Products: n/a
References: [{'name': '20010224 The Simple Server HTTPd Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/165523'}, {'name': '2415', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2415'}]
CVE State: PUBLISHED
Explain CVE-2001-0298
Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20010227 WebReflex 1.55 HTTPd DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/165671'}, {'name': '2425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2425'}]
CVE State: PUBLISHED
Explain CVE-2001-0299
Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
Affected Products: n/a
References: [{'name': '2054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2054'}, {'name': '6020', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6020'}, {'name': '20001127 Nokia firewalls', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97535202912588&w=2'}, {'name': 'nokia-ip440-bo(5640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5640'}, {'name': '20001205 Nokia firewalls - Response from Nokia', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97603879517777&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.
Affected Products: n/a
References: [{'name': '20001222 vulnerability #2 in Oracle Internet Directory 2.1.1.1 in Oracle 8.1.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html'}, {'name': 'oracle-oidldap-write-permission(5804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5804'}, {'name': 'VU#610904', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/610904'}]
CVE State: PUBLISHED
Explain CVE-2001-0301
Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings.
Affected Products: n/a
References: [{'name': 'RHSA-2001:017', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html'}, {'name': '2377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2377'}, {'name': 'analog-alias-bo(6105)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6105'}, {'name': '20010213 Security advisory for analog', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html'}, {'name': '1762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1762'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.analog.cx/security2.html'}, {'name': 'DSA-033', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-033'}]
CVE State: PUBLISHED
Explain CVE-2001-0302
Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
Affected Products: n/a
References: [{'name': '20010215 Vulnerabilities in Pi3Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html'}, {'name': '2381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2381'}]
CVE State: PUBLISHED
Explain CVE-2001-0303
tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file.
Affected Products: n/a
References: [{'name': '20010215 Vulnerabilities in Pi3Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html'}, {'name': '2381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2381'}]
CVE State: PUBLISHED
Explain CVE-2001-0304
Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request.
Affected Products: n/a
References: [{'name': '20010216 Vulnerability in Resin Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98229372610440&w=2'}, {'name': '2384', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2384'}]
CVE State: PUBLISHED