Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0168
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
Affected Products: n/a
References: [{'name': '2306', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2306'}, {'name': 'VU#598581', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/598581'}, {'name': '20010129 [CORE SDI ADVISORY] WinVNC server buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=vnc-list&m=98080763005455&w=2'}, {'name': 'winvnc-server-bo(6026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6026'}]
CVE State: PUBLISHED
Explain CVE-2001-0169
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2001:01', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_001_glibc_txt.html'}, {'name': 'DSA-039', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-039'}, {'name': 'linux-glibc-preload-overwrite(5971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5971'}, {'name': '2223', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2223'}, {'name': '20010121 Trustix Security Advisory - glibc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/157650'}, {'name': 'MDKSA-2001:012', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-012.php3?dis=7.2'}, {'name': 'RHSA-2001:002', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-002.html'}, {'name': 'TLSA2000021-2', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://archives.neohapsis.com/archives/linux/turbolinux/2001-q1/0004.html'}, {'name': 'CSSA-2001-007', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0170
glibc 2.1.9x and earlier does not properly clear the RESOLV_HOST_CONF, HOSTALIASES, or RES_OPTIONS environmental variables when executing setuid/setgid programs, which could allow local users to read arbitrary files.
Affected Products: n/a
References: [{'name': 'linux-glibc-read-files(5907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5907'}, {'name': 'RHSA-2001:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-001.html'}, {'name': '20010110 [slackware-security] glibc 2.2 local vulnerability on setuid binaries', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0186.html'}, {'name': '20010110 Glibc Local Root Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0131.html'}, {'name': '2181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2181'}]
CVE State: PUBLISHED
Explain CVE-2001-0171
Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.
Affected Products: n/a
References: [{'name': '2318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2318'}, {'name': 'slimserve-httpd-dos(6028)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6028'}, {'name': '20010130 DOS Vulnerability in SlimServe HTTPd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0505.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0172
Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
Affected Products: n/a
References: [{'name': '2180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2180'}, {'name': '20010109 major security bug in reiserfs (may affect SuSE Linux)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0127.html'}, {'name': 'suse-reiserfs-long-filenames(5910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5910'}]
CVE State: PUBLISHED
Explain CVE-2001-0173
Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
Affected Products: n/a
References: [{'name': 'crazywwwboard-qdecoder-bo(6033)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6033'}, {'name': '20010130 Nobreak Tecnologies CrazyWWWBoard Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html'}, {'name': '2329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2329'}]
CVE State: PUBLISHED
Explain CVE-2001-0174
Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address.
Affected Products: n/a
References: [{'name': '6138', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6138'}, {'name': '20010130 Security hole in Virus Buster 2001', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0500.html'}, {'name': 'virusbuster-mua-bo(6034)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6034'}]
CVE State: PUBLISHED
Explain CVE-2001-0175
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
Affected Products: n/a
References: [{'name': '20010124 iPlanet FastTrack/Enterprise 4.1 DoS clarifications', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98035833331446&w=2'}, {'name': 'netscape-fasttrack-cache-dos(5985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5985'}, {'name': '2273', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2273'}, {'name': '20010122 def-2001-05: Netscape Fasttrack Server Caching DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98021351718874&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0176
The setuid doroot program in Voyant Sonata 3.x executes arbitrary command line arguments, which allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'sonata-command-execute(5787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5787'}, {'name': '2125', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2125'}, {'name': '20001218 More Sonata Conferencing software vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0278.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0177
WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.
Affected Products: n/a
References: [{'name': '20010110 Vulnerable: Conference Room Professional-Developer Edititon.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/155388'}, {'name': '2178', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2178'}, {'name': 'conferenceroom-developer-dos(5909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5909'}]
CVE State: PUBLISHED
Explain CVE-2001-0178
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2001:02', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_002_kdesu_txt.html'}, {'name': 'CSSA-2001-005.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-005.0.txt'}, {'name': 'MDKSA-2001:018', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-018.php3?dis=7.2'}, {'name': 'kde2-kdesu-retrieve-passwords(5995)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5995'}]
CVE State: PUBLISHED
Explain CVE-2001-0179
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
Affected Products: n/a
References: [{'name': 'jrun-webinf-file-retrieval(6008)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6008'}, {'name': 'ASB01-02', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full'}]
CVE State: PUBLISHED
Explain CVE-2001-0180
Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
Affected Products: n/a
References: [{'name': '20010129 Remote Command Execution in guestserver.cgi + exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html'}, {'name': 'guestserver-cgi-execute-commands(6027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6027'}]
CVE State: PUBLISHED
Explain CVE-2001-0181
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'dhcp-format-string(5953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5953'}, {'name': 'CSSA-2001-003.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txt'}, {'name': '2215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2215'}]
CVE State: PUBLISHED
Explain CVE-2001-0182
FireWall-1 4.1 with a limited-IP license allows remote attackers to cause a denial of service by sending a large number of spoofed IP packets with various source addresses to the inside interface, which floods the console with warning messages and consumes CPU resources.
Affected Products: n/a
References: [{'name': '1733', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1733'}, {'name': 'fw1-limited-license-dos(5966)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5966'}, {'name': '20010117 Licensing Firewall-1 DoS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0298.html'}, {'name': '2238', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2238'}]
CVE State: PUBLISHED
Explain CVE-2001-0183
ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.
Affected Products: n/a
References: [{'name': '2293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2293'}, {'name': 'L-029', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-029.shtml'}, {'name': '20010125 ecepass - proof of concept code for FreeBSD ipfw bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.security-express.com/archives/bugtraq/2001-01/0424.html'}, {'name': 'ipfw-bypass-firewall(5998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5998'}, {'name': 'FreeBSD-SA-01:08', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:08.ipfw.asc'}, {'name': '1743', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1743'}]
CVE State: PUBLISHED
Explain CVE-2001-0184
eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.
Affected Products: n/a
References: [{'name': '20010121 eEye Iris the Network traffic analyser DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0343.html'}, {'name': 'eeye-iris-dos(5981)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5981'}, {'name': '20010122 Re: eEye Iris the Network traffic analyser DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0352.html'}, {'name': '2278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2278'}]
CVE State: PUBLISHED
Explain CVE-2001-0185
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash.
Affected Products: n/a
References: [{'name': 'netopia-telnet-dos(6001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6001'}, {'name': '20010123 Make The Netopia R9100 Router To Crash', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/157952'}, {'name': '2287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2287'}]
CVE State: PUBLISHED
Explain CVE-2001-0186
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20010204 Vulnerability in Free Java Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0061.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0187
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
Affected Products: n/a
References: [{'name': 'DSA-016', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-016'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch'}, {'name': 'wuftp-debug-format-string(6020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6020'}, {'name': '2296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2296'}, {'name': 'CLA-2001:443', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443'}]
CVE State: PUBLISHED
Explain CVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
Affected Products: n/a
References: [{'name': 'goodtech-ftp-dos(5984)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5984'}, {'name': '2270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2270'}, {'name': '20010122 def-2001-03: GoodTech Systems FTP Connection DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0350.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0189
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
Affected Products: n/a
References: [{'name': 'localweb2k-directory-traversal(5982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5982'}, {'name': '2268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2268'}, {'name': '20010119 LocalWEB2000 Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0346.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0190
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
Affected Products: n/a
References: [{'name': 'cu-argv-bo(6224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6224'}, {'name': '20010117 Solaris /usr/bin/cu Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97983943716311&w=2'}, {'name': '20010123 Solaris /usr/bin/cu Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98028642319440&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0191
gnuserv before 3.12, as shipped with XEmacs, does not properly check the specified length of an X Windows MIT-MAGIC-COOKIE cookie, which allows remote attackers to execute arbitrary commands via a buffer overflow, or brute force authentication by using a short cookie length.
Affected Products: n/a
References: [{'name': 'RHSA-2001:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-011.html'}, {'name': 'RHSA-2001:010', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-010.html'}, {'name': 'MDKSA-2001:019', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-019.php3'}, {'name': 'gnuserv-tcp-cookie-overflow(6056)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6056'}, {'name': '20010202 Remote vulnerability in gnuserv/XEmacs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0030.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0192
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://xmailserver.org/XMail-Readme.txt'}, {'name': '20010201 XMail CTRLServer remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0047.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0193
Format string vulnerability in man in some Linux distributions allows local users to gain privileges via a malformed -l parameter.
Affected Products: n/a
References: [{'name': 'man-i-format-string(6059)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6059'}, {'name': '20010131 SuSe / Debian man package format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98096782126481&w=2'}, {'name': 'DSA-028', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-028'}, {'name': '2327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2327'}]
CVE State: PUBLISHED
Explain CVE-2001-0194
Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
Affected Products: n/a
References: [{'name': 'MDKSA-2001:020-1', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-020.php3'}, {'name': '6064', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6064'}, {'name': 'cups-httpgets-dos(6043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6043'}]
CVE State: PUBLISHED
Explain CVE-2001-0195
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
Affected Products: n/a
References: [{'name': 'DSA-015', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-015'}, {'name': 'linux-sash-shadow-readable(5994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5994'}]
CVE State: PUBLISHED
Explain CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
Affected Products: n/a
References: [{'name': 'inetd-ident-read-files(6052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6052'}, {'name': '1753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1753'}, {'name': 'FreeBSD-SA-01:11', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc'}, {'name': '2324', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2324'}]
CVE State: PUBLISHED
Explain CVE-2001-0197
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'RHSA-2001:004', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-004.html'}, {'name': '20010121 [pkc] format bugs in icecast 1.3.8b2 and prior', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0348.html'}, {'name': '2264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2264'}, {'name': 'CLA-2001:374', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000374'}, {'name': 'icecast-format-string(5978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5978'}]
CVE State: PUBLISHED
Explain CVE-2001-0198
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
Affected Products: n/a
References: [{'name': 'quicktime-embedded-tag-bo(6040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6040'}, {'name': '2328', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2328'}, {'name': '20605', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'http://www.exploit-db.com/exploits/20605'}, {'name': '20010131 [SPSadvisory#41]Apple Quick Time Plug-in Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98096678523370&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0199
Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
Affected Products: n/a
References: [{'name': '2335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2335'}, {'name': '14797', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/14797'}, {'name': 'VU#651994', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/651994'}, {'name': 'sedum-directory-traversal(6063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6063'}, {'name': '20010204 Vulnerability in SEDUM HTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0064.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0200
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
Affected Products: n/a
References: [{'name': '20010204 Web root exposure in HSWeb Webserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0052.html'}, {'name': '2336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2336'}]
CVE State: PUBLISHED
Explain CVE-2001-0201
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
Affected Products: n/a
References: [{'name': '20010117 Postaci allows arbitrary SQL query execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.html'}, {'name': '2230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2230'}, {'name': 'postaci-sql-command-injection(5972)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5972'}]
CVE State: PUBLISHED
Explain CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
Affected Products: n/a
References: [{'name': '2339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2339'}, {'name': '20010205 Vulnerability in Picserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0073.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0203
Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.
Affected Products: n/a
References: [{'name': 'watchguard-firebox-obtain-passphrase(5979)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5979'}, {'name': '20010120 Watchguard Firewall Elevated Privilege Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0342.html'}, {'name': '2284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2284'}]
CVE State: PUBLISHED
Explain CVE-2001-0204
Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.
Affected Products: n/a
References: [{'name': '2369', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2369'}, {'name': '20010214 def-2001-07: Watchguard Firebox II PPTP DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/162965'}, {'name': 'firebox-pptp-dos(6109)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6109'}]
CVE State: PUBLISHED
Explain CVE-2001-0205
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20010206 Vulnerability in AOLserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98148759123258&w=2'}, {'name': '20010208 Vulnerability in AOLserver', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98168216003867&w=2'}, {'name': '2343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2343'}]
CVE State: PUBLISHED
Explain CVE-2001-0206
Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.
Affected Products: n/a
References: [{'name': '2346', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2346'}, {'name': '20010207 Vulnerability in Soft Lite ServerWorx', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0137.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0207
Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.
Affected Products: n/a
References: [{'name': 'linux-bing-bo(6036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6036'}, {'name': '2279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2279'}, {'name': '20010119 Buffer overflow in bing', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0330.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0208
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
Affected Products: n/a
References: [{'name': '2359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2359'}, {'name': '20010211 Security Hole in Microfocus Cobol', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0209
Buffer overflow in Shoutcast Distributed Network Audio Server (DNAS) 1.7.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long description.
Affected Products: n/a
References: [{'name': '20010118 Shoutcast Server Buffer Crashes Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0305.html'}, {'name': 'shoutcast-description-bo(5965)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5965'}]
CVE State: PUBLISHED
Explain CVE-2001-0210
Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.
Affected Products: n/a
References: [{'name': '2361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2361'}, {'name': '20010212 Commerce.cgi Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/162259'}]
CVE State: PUBLISHED
Explain CVE-2001-0211
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
Affected Products: n/a
References: [{'name': '20010212 WebSPIRS CGI script "show files" Vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html'}, {'name': '2362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2362'}]
CVE State: PUBLISHED
Explain CVE-2001-0212
Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '2367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2367'}, {'name': '20010212 HIS Auktion 1.62: "show files" vulnerability and remote command execute.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0218.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0213
Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'planetintra-pi-bo(6002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6002'}, {'name': '200101125 [SAFER] Security Bulletin 010125.EXP.1.12', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0421.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.
Affected Products: n/a
References: [{'name': '2370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2370'}, {'name': '20010212 Way board: "show files" Vulnerability with null bite bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.roads.lut.ac.uk/lists/open-roads/2001/02/0001.html'}, {'name': '2371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2371'}, {'name': 'roads-search-view-files(6097)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6097'}, {'name': '20010212 ROADS search system "show files" Vulnerability with "null bite" bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0213.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0216
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
Affected Products: n/a
References: [{'name': '2372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2372'}, {'name': 'webpals-library-cgi-url(6102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6102'}, {'name': '20010212 PALS Library System "show files" Vulnerability and remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0217
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
Affected Products: n/a
References: [{'name': '2372', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2372'}, {'name': 'webpals-library-cgi-url(6102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6102'}, {'name': '20010212 PALS Library System "show files" Vulnerability and remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0218
Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'mars-nwe-format-string(6019)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6019'}, {'name': '20010126 format string vulnerability in mars_nwe 0.99pl19', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0456.html'}, {'name': 'FreeBSD-SA-01:20', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-02/0081.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0219
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
Affected Products: n/a
References: [{'name': '2239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2239'}, {'name': 'HPSBUX0101-137', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0016.html'}, {'name': '7030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7030'}, {'name': '6991', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6991'}, {'name': '7029', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7029'}, {'name': 'hp-stm-dos(5957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5957'}]
CVE State: PUBLISHED
Explain CVE-2001-0220
Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:21', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-02/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
Affected Products: n/a
References: [{'name': 'ja-xklock-bo(6073)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6073'}, {'name': 'FreeBSD-SA-01:19', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-02/0079.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0222
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'MDKSA-2001-016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-016.php3'}, {'name': 'linux-webmin-tmpfiles(6011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6011'}, {'name': 'CSSA-2001-004.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-004.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0223
Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
Affected Products: n/a
References: [{'name': 'wwwwais-cgi-dos(5980)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5980'}, {'name': '20010117 numerous holes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97984174724339&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0224
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
Affected Products: n/a
References: [{'name': 'muskat-empower-url-dir(6093)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6093'}, {'name': '20010212 Vulnerability in Muscat Empower wich can print path to DB-dir.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0216.html'}, {'name': '2374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2374'}]
CVE State: PUBLISHED
Explain CVE-2001-0225
fortran math component in Infobot 0.44.5.3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '20010207 Infobot 0.44.5.3/below remotely vulnerable (also in FreeBSD ports tree)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0127.html'}, {'name': '2349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2349'}]
CVE State: PUBLISHED
Explain CVE-2001-0226
Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.
Affected Products: n/a
References: [{'name': '20010205 Vulnerabilities in BiblioWeb Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0227
Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20010205 Vulnerabilities in BiblioWeb Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0228
Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
Affected Products: n/a
References: [{'name': '81099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/81099'}, {'name': '20010202 GoAhead Web Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://freecode.com/projects/embedthis-goahead-webserver/releases/343539'}]
CVE State: PUBLISHED
Explain CVE-2001-0229
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts.
Affected Products: n/a
References: [{'name': '20010206 Security hole in ChiliSoft ASP on Linux.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0112.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0230
Buffer overflow in dc20ctrl before 0.4_1 in FreeBSD, and possibly other operating systems, allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:22', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-02/0083.html'}, {'name': '6081', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6081'}, {'name': 'dc20ctrl-port-bo(6077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6077'}]
CVE State: PUBLISHED
Explain CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter.
Affected Products: n/a
References: [{'name': '20010103 News Desk 1.2 CGI Vulnerbility', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html'}, {'name': 'newsdesk-cgi-read-files(5898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5898'}, {'name': 'VU#496064', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/496064'}, {'name': '2172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2172'}]
CVE State: PUBLISHED
Explain CVE-2001-0232
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters.
Affected Products: n/a
References: [{'name': '20010103 News Desk 1.2 CGI Vulnerbility', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0233
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
Affected Products: n/a
References: [{'name': 'RHSA-2001:005', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-005.html'}, {'name': 'micq-sprintf-remote-bo(5962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5962'}, {'name': '20010118 [PkC] Advisory #003: micq-0.4.6 remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0307.html'}, {'name': 'FreeBSD-SA-01:14', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:14.micq.asc'}, {'name': 'DSA-012', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-012'}, {'name': '20010124 patch Re: [PkC] Advisory #003: micq-0.4.6 remote buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0395.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
Affected Products: n/a
References: [{'name': '20010126 NewsDaemon remote administrator access', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=60570'}, {'name': 'newsdaemon-gain-admin-access(6010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6010'}]
CVE State: PUBLISHED
Explain CVE-2001-0235
Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:09', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:09.crontab.v1.1.asc'}, {'name': 'crontab-read-files(6225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6225'}, {'name': '2332', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2332'}, {'name': 'DSA-024', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-024'}]
CVE State: PUBLISHED