Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-1050
CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': '3389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3389'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7215'}]
CVE State: PUBLISHED
Explain CVE-2001-1051
Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': '3390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3390'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7215'}]
CVE State: PUBLISHED
Explain CVE-2001-1052
Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': '3391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3391'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7215'}]
CVE State: PUBLISHED
Explain CVE-2001-1053
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Affected Products: n/a
References: [{'name': '20010713 AdCycle SQL Command Insertion Vulnerability - qDefense Advisory Number QDAV-2001-7-2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17'}, {'name': '3032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3032'}, {'name': 'adcycle-insert-sql-command(6837)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6837'}]
CVE State: PUBLISHED
Explain CVE-2001-1054
PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?thread_id=148900&forum_id=117952'}, {'name': '3392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3392'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=117952'}]
CVE State: PUBLISHED
Explain CVE-2001-1055
The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke.
Affected Products: n/a
References: [{'name': '20010730 ARPNuke - 80 kb/s kills a whole subnet', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200323'}, {'name': 'win-arp-packet-flooding-dos(6924)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6924'}, {'name': '3113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3113'}]
CVE State: PUBLISHED
Explain CVE-2001-1056
IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
Affected Products: n/a
References: [{'name': '20010730 Re: [RAZOR] Linux kernel IP masquerading vulnerability (_actual_ patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.html'}, {'name': '20010730 [RAZOR] Linux kernel IP masquerading vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.html'}, {'name': 'linux-ipmasqirc-bypass-protection(6923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6923.php'}, {'name': '1916', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1916'}, {'name': '3117', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3117'}]
CVE State: PUBLISHED
Explain CVE-2001-1057
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests.
Affected Products: n/a
References: [{'name': '20010730 a couple minor issues with mathematica license manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200462'}, {'name': 'mathematica-license-dos(6926)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6926'}, {'name': '3120', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3120'}]
CVE State: PUBLISHED
Explain CVE-2001-1058
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license.
Affected Products: n/a
References: [{'name': 'mathematica-license-retrieval(6927)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6927'}, {'name': '20010730 a couple minor issues with mathematica license manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200462'}, {'name': '3118', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3118'}]
CVE State: PUBLISHED
Explain CVE-2001-1059
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.
Affected Products: n/a
References: [{'name': '3119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3119'}, {'name': 'vmware-obtain-license-info(6925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6925'}, {'name': '5475', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5475'}, {'name': '20010730 vmware bug?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200455'}]
CVE State: PUBLISHED
Explain CVE-2001-1060
phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
Affected Products: n/a
References: [{'name': '3121', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3121'}, {'tags': ['x_refsource_MISC'], 'url': 'http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/'}, {'name': '20010731 New command execution vulnerability in myPhpAdmin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200596'}]
CVE State: PUBLISHED
Explain CVE-2001-1061
Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
Affected Products: n/a
References: [{'name': 'IY22255', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2001-q3/0003.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1062
Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.
Affected Products: n/a
References: [{'name': 'CSSA-2001-SCO.12', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.12/CSSA-2001-SCO.12.txt'}, {'name': 'openserver-mana-bo(7034)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7034.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1063
Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.
Affected Products: n/a
References: [{'name': 'unixware-openunix-uidadmin-bo(7036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7036'}, {'name': 'CSSA-2001-SCO.14', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.14/CSSA-2001-SCO.14.txt'}, {'name': '3244', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3244'}]
CVE State: PUBLISHED
Explain CVE-2001-1064
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
Affected Products: n/a
References: [{'name': '3236', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3236'}, {'name': 'cisco-cbos-telnet-dos(7025)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7025'}, {'name': '20010823 CBOS Web-based Configuration Utility Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml'}, {'name': 'cisco-cbos-http-dos(7026)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7026'}]
CVE State: PUBLISHED
Explain CVE-2001-1065
Web-based configuration utility in Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap binds itself to port 80 even when web-based configuration services are disabled, which could leave the router open to attack.
Affected Products: n/a
References: [{'name': 'cisco-cbos-web-config(7027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7027'}, {'name': '20010823 CBOS Web-based Configuration Utility Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-1066
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': 'netscape-install-tmpfile-symlink(7042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7042'}, {'name': '20010827 Dangerous temp file creation during installation of Netscape 6.', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0036.html'}, {'name': '20010827 Dangerous temp file creation during installation of Netscape 6.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99893667921216&w=2'}, {'name': '3243', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3243'}]
CVE State: PUBLISHED
Explain CVE-2001-1067
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Affected Products: n/a
References: [{'name': '3230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3230'}, {'name': '20010822 AOLserver 3.0 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html'}, {'name': 'aolserver-long-password-dos(7030)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7030'}, {'name': '20010906 AOLserver exploit code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213041'}]
CVE State: PUBLISHED
Explain CVE-2001-1068
qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.
Affected Products: n/a
References: [{'name': '3242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3242'}, {'name': 'qpopper-pam-auth-error(7047)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7047'}, {'name': '20010825 qpopper and pam.d', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0363.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1069
libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior.
Affected Products: n/a
References: [{'name': '20010822 Adobe Acrobat creates world writable ~/AdobeFnt.lst files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99849121502399&w=2'}, {'name': 'adobe-acrobat-insecure-permissions(7024)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7024'}, {'tags': ['x_refsource_MISC'], 'url': 'http://lists.debian.org/debian-security/2001/debian-security-200101/msg00085.html'}, {'name': '3225', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3225'}]
CVE State: PUBLISHED
Explain CVE-2001-1070
Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.
Affected Products: n/a
References: [{'name': 'mas-telnet-connect-dos(7020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7020'}, {'name': '20010821 Bug in MAS90 Accounting Platform remote access?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0312.html'}, {'name': '3221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3221'}]
CVE State: PUBLISHED
Explain CVE-2001-1071
Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
Affected Products: n/a
References: [{'name': '1969', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1969'}, {'name': 'cisco-ios-cdp-dos(7242)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7242'}, {'name': 'VU#139491', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/139491'}, {'name': '20011009 Cisco CDP attacks', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/219257'}, {'name': '3412', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3412'}, {'name': '20011009 Cisco Systems - Vulnerability in CDP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/219305'}]
CVE State: PUBLISHED
Explain CVE-2001-1072
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-02-01#security'}, {'name': '3176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3176'}, {'name': '20010812 Are your mod_rewrite rules doing what you expect?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/203955'}, {'name': 'apache-rewrite-bypass-directives(8633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8633'}]
CVE State: PUBLISHED
Explain CVE-2001-1073
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
Affected Products: n/a
References: [{'name': '20010815 webridge application suite gives up too much error information on Internal Server Error', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/204725'}, {'name': 'webridge-px-reveal-information(6993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6993'}, {'name': '3182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3182'}]
CVE State: PUBLISHED
Explain CVE-2001-1074
Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
Affected Products: n/a
References: [{'name': '2795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2795'}, {'name': "20010526 Webmin Doesn't Clean Env (root exploit)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html'}, {'name': 'webmin-gain-information(6627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6627'}, {'name': 'CSSA-2001-019.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt'}, {'name': 'MDKSA-2001:059', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3'}]
CVE State: PUBLISHED
Explain CVE-2001-1075
poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
Affected Products: n/a
References: [{'name': 'cobalt-poprelayd-mail-relay(6806)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6806'}, {'name': '2986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2986'}, {'name': '20010703 poprelayd and sendmail relay authentication problem (Cobalt Raq3)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0064.html'}, {'name': '20010709 Re: poprelayd and sendmail relay authentication problem (Cobalt Raq3)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0150.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1076
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long (1) SOR or (2) CFIME environment variable.
Affected Products: n/a
References: [{'name': '2935', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2935'}, {'name': '20010705 Solaris whodo Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0076.html'}, {'name': 'oval:org.mitre.oval:def:47', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A47'}, {'name': 'solaris-whodo-bo(6802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6802'}, {'name': 'oval:org.mitre.oval:def:34', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A34'}]
CVE State: PUBLISHED
Explain CVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
Affected Products: n/a
References: [{'name': '2878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2878'}, {'name': 'MDKSA-2001:060', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-060.php'}, {'name': '20010615 Rxvt vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/191510'}, {'name': 'rxvt-ttprintf-bo(6701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6701'}, {'name': 'DSA-062', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-062'}, {'name': 'IMNX-2001-70-028-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-028-01'}]
CVE State: PUBLISHED
Explain CVE-2001-1078
Format string vulnerability in flog function of eXtremail 1.1.9 and earlier allows remote attackers to gain root privileges via format specifiers in the SMTP commands (1) HELO, (2) EHLO, (3) MAIL FROM, or (4) RCPT TO, and the POP3 commands (5) USER and (6) other commands that can be executed after POP3 authentication.
Affected Products: n/a
References: [{'name': '2908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2908'}, {'name': "20010622 eXtremail Remote Format String ('s)", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-06/0291.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.extremail.com/news.htm'}, {'name': 'extremail-flog-format-string(6733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6733'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.extremail.com/history.htm'}]
CVE State: PUBLISHED
Explain CVE-2001-1079
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
Affected Products: n/a
References: [{'name': '5473', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5473'}, {'name': 'IY19069', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2001-q3/0000.html'}, {'name': 'aix-keyfile-world-writable(8923)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8923'}]
CVE State: PUBLISHED
Explain CVE-2001-1080
diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges by modifying the variable to point to a Trojan horse program.
Affected Products: n/a
References: [{'name': '2916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2916'}, {'name': 'aix-diagrpt-root-shell(6734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6734'}, {'name': 'MSS-OAR-E01-2001:225.1', 'tags': ['vendor-advisory', 'x_refsource_IBM'], 'url': 'http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2001.225.1/%24file/oar225.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-1081
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/releases/52020/'}, {'name': '20010719 [VulnWatch] Changelog maddness (14 various broken apps)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html'}, {'name': '[fm-news] 20010713 Newsletter for Friday, July 13th 2001', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0009.html'}, {'name': '2994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2994'}]
CVE State: PUBLISHED
Explain CVE-2001-1082
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://freshmeat.net/releases/52020/'}]
CVE State: PUBLISHED
Explain CVE-2001-1083
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
Affected Products: n/a
References: [{'name': 'RHSA-2002:063', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-063.html'}, {'name': 'DSA-089', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-089'}, {'name': '20010626 Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/193516'}, {'name': 'icecast-http-remote-dos(6751)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6751'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.icecast.org/index.html'}, {'name': 'RHSA-2001:105', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-105.html'}, {'name': '2933', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2933'}, {'name': 'CSSA-2002-020.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-020.0.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.icecast.org/releases/icecast-1.3.11.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2001-1084
Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.
Affected Products: n/a
References: [{'name': 'java-servlet-crosssite-scripting(6793)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6793'}, {'name': '20010702 Multiple Vendor Java Servlet Container Cross-Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html'}, {'name': 'MPSB01-06', 'tags': ['vendor-advisory', 'x_refsource_ALLAIRE'], 'url': 'http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full'}, {'name': '1891', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1891'}, {'name': '2983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2983'}, {'name': 'VU#654643', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/654643'}]
CVE State: PUBLISHED
Explain CVE-2001-1085
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': 'lmail-tmpfile-symlink(6809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6809'}, {'name': '20010705 lmail local root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/195022'}, {'name': '2984', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2984'}]
CVE State: PUBLISHED
Explain CVE-2001-1086
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
Affected Products: n/a
References: [{'name': 'xdm-cookie-brute-force(6808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6808'}, {'name': '20010705 Re: xdm cookies fast brute force', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/195008'}, {'name': '20010704 xdm cookies fast brute force', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194907'}, {'name': '2985', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2985'}]
CVE State: PUBLISHED
Explain CVE-2001-1087
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
Affected Products: n/a
References: [{'name': 'netcache-tunnel-default-configuration(6807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6807'}, {'name': '2990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2990'}, {'name': '20010705 RE: Tunnel ports allowed on NetApp NetCaches', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/195176'}]
CVE State: PUBLISHED
Explain CVE-2001-1088
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
Affected Products: n/a
References: [{'name': '20010605 SECURITY.NNOV: Outlook Express address book spoofing', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/188752'}, {'name': 'outlook-address-book-spoofing(6655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6655'}, {'name': '2823', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2823'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241'}]
CVE State: PUBLISHED
Explain CVE-2001-1089
libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
Affected Products: n/a
References: [{'name': '20010910 RUS-CERT Advisory 2001-09:01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213331'}, {'name': 'postgresql-nss-authentication-modules(7111)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7111'}, {'name': '3314', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3314'}]
CVE State: PUBLISHED
Explain CVE-2001-1090
nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
Affected Products: n/a
References: [{'name': '3315', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3315'}, {'name': '20010910 RUS-CERT Advisory 2001-09:01', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213331'}, {'name': 'postgresql-nss-authentication-modules(7111)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7111'}]
CVE State: PUBLISHED
Explain CVE-2001-1091
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
Affected Products: n/a
References: [{'name': 'bsd-dump-tty-privileges(7037)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7037'}, {'name': 'NetBSD-SA2001-014', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc'}]
CVE State: PUBLISHED
Explain CVE-2001-1092
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
Affected Products: n/a
References: [{'name': 'du-msgchk-symlink(7102)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7102'}, {'name': '20010910 Digital Unix 4.0x msgchk multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213238'}, {'name': 'VU#440539', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/440539'}, {'name': '3320', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3320'}]
CVE State: PUBLISHED
Explain CVE-2001-1093
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
Affected Products: n/a
References: [{'name': 'du-msgchk-bo(7101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7101'}, {'name': '3311', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3311'}, {'name': '20010910 Digital Unix 4.0x msgchk multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213238'}]
CVE State: PUBLISHED
Explain CVE-2001-1094
NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.
Affected Products: n/a
References: [{'name': 'netop-school-bypass-authentication(7120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7120'}, {'name': '3321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3321'}, {'name': '20010911 NetOP School Admin Vulnerability for Windows 2000 Terminal Services and NT4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213516'}]
CVE State: PUBLISHED
Explain CVE-2001-1095
Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter.
Affected Products: n/a
References: [{'name': '5469', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5469'}, {'name': 'IY24231', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY24231&apar=only'}, {'name': 'IY23401', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2001-q4/0000.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1096
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
Affected Products: n/a
References: [{'name': '5470', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5470'}, {'name': 'IY23402', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2001-q4/0000.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1097
Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
Affected Products: n/a
References: [{'name': '20010724 UDP packet handling weird behaviour of various operating systems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/199558'}, {'name': 'cisco-ios-udp-dos(6319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6913'}, {'name': '20010811 Re: UDP packet handling weird behaviour of various operating systems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99749327219189&w=2'}, {'name': '3096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3096'}]
CVE State: PUBLISHED
Explain CVE-2001-1098
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
Affected Products: n/a
References: [{'name': 'cisco-pfm-plaintext-password(7265)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7265'}, {'name': 'VU#639507', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/639507'}, {'name': '3419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3419'}, {'name': '20011010 Vulnerability: Cisco PIX Firewall Manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1099
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
Affected Products: n/a
References: [{'name': '20010907 Microsoft Exchange + Norton AntiVirus leak local information', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212724'}, {'name': '3305', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3305'}, {'name': '20010912 Re: Microsoft Exchange + Norton AntiVirus leak local information', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213762'}, {'name': 'nav-exchange-reveal-information(7093)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7093'}]
CVE State: PUBLISHED
Explain CVE-2001-1100
sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.
Affected Products: n/a
References: [{'name': '3673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3673'}, {'name': '20011007 Bug found at W3Mail Webmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/218921'}, {'name': 'w3mail-metacharacters-command-execution(7230)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7230'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.w3mail.org/ChangeLog'}]
CVE State: PUBLISHED
Explain CVE-2001-1101
The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
Affected Products: n/a
References: [{'name': '20010908 Bug in remote GUI access in CheckPoint Firewall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212826'}, {'name': '3303', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3303'}, {'name': 'fw1-log-file-overwrite(7095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7095'}]
CVE State: PUBLISHED
Explain CVE-2001-1102
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
Affected Products: n/a
References: [{'name': '3300', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3300'}, {'name': 'fw1-tmp-file-symlink(7094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7094'}, {'name': '20010908 Bug in compile portion for older versions of CheckPoint Firewalls', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212824'}]
CVE State: PUBLISHED
Explain CVE-2001-1103
FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'VU#320944', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/320944'}, {'name': 'ftp-voyager-embedded-script-execution(7119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7119'}]
CVE State: PUBLISHED
Explain CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
Affected Products: n/a
References: [{'name': '20010725 Weak TCP Sequence Numbers in Sonicwall SOHO Firewall', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/199632'}, {'name': '3098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3098'}]
CVE State: PUBLISHED
Explain CVE-2001-1105
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
Affected Products: n/a
References: [{'name': '20010912 Vulnerable SSL Implementation in iCDN', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SSL-J-pub.html'}, {'name': '3329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3329'}, {'name': 'L-141', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-141.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html'}, {'name': 'bsafe-ssl-bypass-authentication(7112)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7112'}]
CVE State: PUBLISHED
Explain CVE-2001-1106
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
Affected Products: n/a
References: [{'name': '3095', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3095'}, {'name': '20010725 Sambar Server password decryption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/199418'}, {'name': 'sambar-insecure-passwords(6909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6909'}]
CVE State: PUBLISHED
Explain CVE-2001-1107
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html'}, {'name': '20010726 Snapstream PVS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html'}, {'name': '3101', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3101'}, {'name': 'snapstream-dot-directory-traversal(6917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6917'}]
CVE State: PUBLISHED
Explain CVE-2001-1108
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html'}, {'name': '20010726 Snapstream PVS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html'}, {'name': 'snapstream-dot-directory-traversal(6917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6917'}, {'name': '3100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3100'}, {'name': '2080', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2080'}]
CVE State: PUBLISHED
Explain CVE-2001-1109
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.eftp.org/releasehistory.html'}, {'name': 'eftp-list-directory-traversal(7113)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7113'}, {'name': 'eftp-quote-reveal-information(7114)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7114'}, {'name': '3331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3331'}, {'name': '20010912 EFTP Version 2.0.7.337 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213647'}, {'name': '3333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3333'}]
CVE State: PUBLISHED
Explain CVE-2001-1110
EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
Affected Products: n/a
References: [{'name': '20010912 EFTP Version 2.0.7.337 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213647'}]
CVE State: PUBLISHED