Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0990
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.inter7.com/vpopmail/ChangeLog'}, {'name': 'vpopmail-insecure-auth-data(7076)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7076'}, {'name': '20010904 BUZ.CH Security Advisory 200109041: Inter7 vpopmail DB pw problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212036'}, {'name': '3284', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3284'}]
CVE State: PUBLISHED
Explain CVE-2001-0991
Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.
Affected Products: n/a
References: [{'name': '20010724 Proxomitron Cross-site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/198954'}, {'name': '3087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3087'}, {'name': 'proxomitron-cross-site-scripting(6887)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6887'}]
CVE State: PUBLISHED
Explain CVE-2001-0992
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
Affected Products: n/a
References: [{'name': '20010905 ShopPlus Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html'}, {'name': 'shopplus-command-execution(7077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7077'}]
CVE State: PUBLISHED
Explain CVE-2001-0993
sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
Affected Products: n/a
References: [{'name': 'NetBSD-SA2001-011', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html'}, {'name': '3088', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3088'}, {'name': 'bsd-kernel-sendmsg-dos(6908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6908'}, {'name': '1910', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1910'}]
CVE State: PUBLISHED
Explain CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device.
Affected Products: n/a
References: [{'name': '3286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3286'}, {'name': '20010904 Telnet DoS Vulnerability in Marconi ATM Switch Software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/211956'}, {'name': 'forethought-telnet-dos(7082)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7082'}]
CVE State: PUBLISHED
Explain CVE-2001-0995
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.phprojekt.com/ChangeLog'}, {'name': 'phprojekt-id-modify(7035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7035'}, {'name': '3239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3239'}, {'name': '20010826 security hole in os groupware suite PHProjekt', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/210349'}]
CVE State: PUBLISHED
Explain CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
Affected Products: n/a
References: [{'name': 'pop3lite-dot-message-injection(7075)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7075'}, {'name': '3278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3278'}, {'name': '20010902 POP3Lite 0.2.3b minor client side DoS and message injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0997
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.
Affected Products: n/a
References: [{'name': 'listrecpl-remote-command-execution(7117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7117'}, {'name': '20010911 Textor Webmasters Ltd (listrec.pl)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0998
IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) that does not send additional data, which causes a failure in snmpd.
Affected Products: n/a
References: [{'name': 'IY17630', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only'}, {'name': '20011002 Vulnerability 3358, "IBM HACMP Port Scan Denial of Service Vulnerability"', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/217910'}, {'name': '20010924 HACMP and port scans', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/216105'}, {'name': 'hacmp-portscan-dos(7165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7165'}, {'name': 'IY20943', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY20943&apar=only'}, {'name': '3358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3358'}]
CVE State: PUBLISHED
Explain CVE-2001-0999
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.
Affected Products: n/a
References: [{'name': '20010915 Proof-Of-Concept Perl Script for Bugtraq-ID: #3334', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/214453'}, {'name': '3334', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3334'}, {'name': '20010912 FREAK SHOW: Outlook Express 6.00', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213754'}, {'name': 'outlook-express-text-script-execution(7118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7118'}]
CVE State: PUBLISHED
Explain CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
Affected Products: n/a
References: [{'name': 'radius-rlmadmin-help-symlink(7096)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7096'}, {'name': '3302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3302'}, {'name': '20010907 rlmadmin v3.8M view file symlink vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1002
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
Affected Products: n/a
References: [{'name': '3241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3241'}, {'name': 'dvips-lpd-command-execution(16509)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/16509'}, {'name': '20010827 LPRng/rhs-printfilters - remote execution of commands', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99892644616749&w=2'}, {'name': 'RHSA-2001:102', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-102.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1003
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.
Affected Products: n/a
References: [{'name': '20010823 Respondus v1.1.2 stores passwords using weak encryption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99859557930285&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-1004
Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt'}, {'name': '20010830 gnut gnutella client html injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1005
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows attackers who have access to the registry key to decrypt the password and gain privileges.
Affected Products: n/a
References: [{'name': '3231', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3231'}, {'name': '20010824 Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/210067'}]
CVE State: PUBLISHED
Explain CVE-2001-1006
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
Affected Products: n/a
References: [{'name': '20010824 Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/210067'}, {'name': '3232', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3232'}]
CVE State: PUBLISHED
Explain CVE-2001-1007
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorrect key is entered, which allows attackers to more quickly guess the key via a brute force attack.
Affected Products: n/a
References: [{'name': '20010824 Starfish Truesync Desktop + REX 5000 Pro multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/210067'}]
CVE State: PUBLISHED
Explain CVE-2001-1008
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate.
Affected Products: n/a
References: [{'name': '3245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3245'}, {'name': 'javaplugin-jre-expired-certificate(7048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7048.php'}, {'name': '20010824 Java Plugin 1.4 with JRE 1.3 -> Ignores certificates.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1009
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2001:026', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_026_fetchmail_txt.html'}, {'name': 'DSA-071', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-071'}, {'name': 'RHSA-2001:103', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-103.html'}, {'name': '3166', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3166'}, {'name': '20010809 Fetchmail security advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html'}, {'name': 'CLA-2001:419', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419'}, {'name': 'MDKSA-2001:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-072.php3'}, {'name': 'ESA-20010816-01', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1555.html'}, {'name': '3164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3164'}, {'name': 'fetchmail-signed-integer-index(6965)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6965.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1010
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sambar.com/security.htm'}, {'name': '3092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3092'}, {'name': 'sambar-pagecount-overwrite-files(6916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6916'}, {'name': '20010721 Sambar Web Server pagecount exploit code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0565.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1011
index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
Affected Products: n/a
References: [{'name': 'mambo-phpsessid-gain-privileges(6910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6910'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz'}, {'name': '20010725 Serious security hole in Mambo Site Server version 3.0.X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html'}, {'name': '1911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1911'}, {'name': '3093', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3093'}]
CVE State: PUBLISHED
Explain CVE-2001-1012
Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.
Affected Products: n/a
References: [{'name': 'screen-local-privilege-elevation(7134)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7134'}, {'name': 'SuSE-SA:2001:030', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_030_screen_txt.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1013
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
Affected Products: n/a
References: [{'name': '3335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3335'}, {'name': '20010912 Is there user Anna at your host ?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213667'}, {'name': '20000707 Re: your mail', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html'}, {'name': '20000707 (no subject)', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html'}, {'name': 'linux-apache-username-exists(7129)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7129'}, {'name': '20000707 Re: apache and 404/404 status codes', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1014
eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
Affected Products: n/a
References: [{'name': '20010915 advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/214456'}, {'name': 'eshop-script-execute-commands(7128)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7128'}, {'name': '3340', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3340'}]
CVE State: PUBLISHED
Explain CVE-2001-1015
Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.
Affected Products: n/a
References: [{'name': '20011016 [ ** Snes9x buffer overflow vulnerability ** ]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0107.html'}, {'name': '3437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3437'}]
CVE State: PUBLISHED
Explain CVE-2001-1016
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."
Affected Products: n/a
References: [{'name': '20010904 PGPsdk Key Validity Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/211806'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pgp.com/support/product-advisories/pgpsdk.asp'}, {'name': '3280', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3280'}, {'name': 'pgp-invalid-key-display(7081)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7081'}, {'name': '1946', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1946'}]
CVE State: PUBLISHED
Explain CVE-2001-1017
rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords.
Affected Products: n/a
References: [{'name': '3282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3282'}, {'name': 'rmuser-insecure-password-file(7086)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7086'}, {'name': 'FreeBSD-SA-01:59', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:59.rmuser.v1.1.asc'}, {'name': '1947', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1947'}]
CVE State: PUBLISHED
Explain CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
Affected Products: n/a
References: [{'name': '20010919 lotus domino server 5.08 is very gabby', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100094373621813&w=2'}, {'name': '3350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3350'}, {'name': 'lotus-domino-ip-reveal(7180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7180'}]
CVE State: PUBLISHED
Explain CVE-2001-1019
Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
Affected Products: n/a
References: [{'name': '20010908 sglMerchant Version 1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212825'}, {'name': 'sglmerchant-dot-directory-traversal(7100)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7100'}, {'name': '3309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3309'}]
CVE State: PUBLISHED
Explain CVE-2001-1020
edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.
Affected Products: n/a
References: [{'name': '3288', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3288'}, {'name': '20010905 directorymanager bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0013.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=51589'}, {'name': 'directory-manager-execute-commands(7079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7079'}]
CVE State: PUBLISHED
Explain CVE-2001-1021
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
Affected Products: n/a
References: [{'name': 'wsftp-long-command-bo(6911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6911'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html'}, {'name': '20010726 def-2001-28 - WS_FTP server 2.0.2 Buffer Overflow and possible DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1022
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
Affected Products: n/a
References: [{'name': 'CLA-2001:428', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428'}, {'name': 'DSA-107', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-107'}, {'name': 'linux-groff-format-string(6918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6918'}, {'name': '3103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3103'}, {'name': 'DSA-072', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-072'}, {'name': '1914', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1914'}, {'name': 'RHSA-2002:004', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-004.html'}, {'name': '20010727 ADV/EXP:pic/lpd remote exploit - RH 7.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/199706'}]
CVE State: PUBLISHED
Explain CVE-2001-1023
Xcache 2.1 allows remote attackers to determine the absolute path of web server documents by requesting a URL that is not cached by Xcache, which returns the full pathname in the Content-PageName header.
Affected Products: n/a
References: [{'name': 'xcache-path-disclosure(7159)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7159'}, {'name': '3352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3352'}, {'name': '20010921 IRM Security Advisory: Xcache Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0182.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1024
login.gas.bat and other CGI scripts in Entrust getAccess allow remote attackers to execute Java programs, and possibly arbitrary commands, by specifying an alternate -classpath argument.
Affected Products: n/a
References: [{'name': '20010727 Entrust - getAccess', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0662.html'}, {'name': 'entrust-getaccess-execute-commands(6915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6915'}]
CVE State: PUBLISHED
Explain CVE-2001-1025
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
Affected Products: n/a
References: [{'name': '3149', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3149'}, {'name': '20010803 [VulnWatch] 3 phpnuke bugs (2 possibly lead to admin privs)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1026
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
Affected Products: n/a
References: [{'name': 'content-slash-bypass-filter(6816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6816'}, {'name': 'applettrap-bypass-ip-restrictions(6818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6818'}, {'name': 'applettrap-unicode-bypass-filter(6817)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6817'}, {'name': '3000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3000'}, {'name': '20010709 Various problems in Ternd Micro AppletTrap URL filtering', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html'}, {'name': '2996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2996'}, {'name': 'applettrap-zero-bypass-restrictions(6819)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6819'}, {'name': '2998', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2998'}]
CVE State: PUBLISHED
Explain CVE-2001-1027
Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.windowmaker.org/src/ChangeLog'}, {'name': 'SuSE-SA:2001:032', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_032_wmaker_txt.html'}, {'name': 'DSA-074', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-074'}, {'name': '3177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3177'}, {'name': 'CLA-2001:411', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000411'}, {'name': 'windowmaker-title-bo(6969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6969'}, {'name': 'MDKSA-2001:074', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-074.php3'}]
CVE State: PUBLISHED
Explain CVE-2001-1028
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
Affected Products: n/a
References: [{'name': 'man-ultimate-source-bo(8622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8622.php'}, {'name': 'RHSA-2001:072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-072.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
Affected Products: n/a
References: [{'name': '20010920 Local vulnerability in libutil derived with FreeBSD 4.4-RC (and earlier)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html'}, {'name': '6073', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6073'}, {'name': 'bsd-libutil-privilege-dropping(8697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8697'}]
CVE State: PUBLISHED
Explain CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
Affected Products: n/a
References: [{'name': '20010718 Squid httpd acceleration acl bug enables portscanning', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197727'}, {'name': 'squid-http-accelerator-portscanning(6862)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6862'}, {'name': 'RHSA-2001:097', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-097.html'}, {'name': 'IMNX-2001-70-031-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01'}, {'name': 'MDKSA-2001:066', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-066.php3'}, {'name': 'CSSA-2001-029.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt'}, {'name': '20010719 TSLSA-2001-0013 - Squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1031
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
Affected Products: n/a
References: [{'name': '3374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3374'}, {'name': '20010927 CARTSA-2001-03 Meteor FTPD 1.0 Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0231.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://207.202.218.172/'}, {'name': 'meteor-ftpd-directory-traversal(7176)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7176'}]
CVE State: PUBLISHED
Explain CVE-2001-1032
admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.
Affected Products: n/a
References: [{'name': '20010924 twlc advisory: all versions of php nuke are vulnerable...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0203.html'}, {'name': '3361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3361'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=113892'}, {'name': 'php-nuke-admin-file-overwrite(7170)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7170'}]
CVE State: PUBLISHED
Explain CVE-2001-1033
Compaq TruCluster 1.5 allows remote attackers to cause a denial of service via a port scan from a system that does not have a DNS PTR record, which causes the cluster to enter a "split-brain" state.
Affected Products: n/a
References: [{'name': 'trucluster-portscan-dos(7171)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7171'}, {'name': '20010925 Re: HACMP and port scans', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/216323'}, {'name': '3362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3362'}]
CVE State: PUBLISHED
Explain CVE-2001-1034
Format string vulnerability in Hylafax on FreeBSD allows local users to execute arbitrary code via format specifiers in the -h hostname argument for (1) faxrm or (2) faxalter.
Affected Products: n/a
References: [{'name': 'hylafax-hostname-format-string(7164)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7164'}, {'name': '20010923 hylafax', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/215984'}, {'name': '3357', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3357'}]
CVE State: PUBLISHED
Explain CVE-2001-1035
Binary decoding feature of slrn 0.9 and earlier allows remote attackers to execute commands via shell scripts that are inserted into a news post.
Affected Products: n/a
References: [{'name': 'slrn-decode-script-execution(7166)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7166'}, {'name': 'DSA-078', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-078'}, {'name': '3364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3364'}]
CVE State: PUBLISHED
Explain CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
Affected Products: n/a
References: [{'name': 'locate-command-execution(6932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6932'}, {'name': '3127', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3127'}, {'name': '20010801 Slackware 8.0, 7.1 Vulnerability: /usr/bin/locate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/200991'}, {'name': '5477', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5477'}]
CVE State: PUBLISHED
Explain CVE-2001-1037
Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.
Affected Products: n/a
References: [{'name': 'cisco-sn-gain-access(6827)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6827'}, {'name': '3131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3131'}, {'name': '20010711 Vulnerabilities in Cisco SN 5420 Storage Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SN-kernel-pub.html'}, {'name': '1917', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1917'}]
CVE State: PUBLISHED
Explain CVE-2001-1038
Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
Affected Products: n/a
References: [{'name': 'cisco-sn-dos(6826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6826'}, {'name': '20010711 Vulnerabilities in Cisco SN 5420 Storage Routers', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/SN-kernel-pub.html'}, {'name': '1899', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1899'}, {'name': 'L-112', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-112.shtml'}, {'name': '3014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3014'}]
CVE State: PUBLISHED
Explain CVE-2001-1039
The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.
Affected Products: n/a
References: [{'name': '3132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3132'}, {'name': "20010801 HP Jetdirect passwords don't sync", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/201160'}]
CVE State: PUBLISHED
Explain CVE-2001-1040
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
Affected Products: n/a
References: [{'name': '3132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3132'}, {'name': "20010802 Re: HP Jetdirect passwords don't sync", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/201224'}]
CVE State: PUBLISHED
Explain CVE-2001-1041
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
Affected Products: n/a
References: [{'name': '3135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3135'}, {'name': '20011024 Oracle File Overwrite Security Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100395579811880&w=2'}, {'name': '20010802 vulnerability in oracle binary in Oracle 8.0.5 - 8.1.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99677282117387&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf'}]
CVE State: PUBLISHED
Explain CVE-2001-1042
Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
Affected Products: n/a
References: [{'name': '20010701 Broker 5.9.5.0 Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194443'}, {'name': '2960', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2960'}, {'name': 'ftp-lnk-directory-traversal(6760)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6760'}]
CVE State: PUBLISHED
Explain CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
Affected Products: n/a
References: [{'name': 'ftp-lnk-directory-traversal(6760)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6760'}, {'name': '2961', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2961'}, {'name': '1886', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1886'}, {'name': '20010701 ArGoSoft 1.2.2.2 *.lnk upload Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194445'}]
CVE State: PUBLISHED
Explain CVE-2001-1044
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Affected Products: n/a
References: [{'name': '20010112 Basilix Webmail System *.class *.inc Permission Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/155897'}, {'name': '2198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2198'}, {'name': 'basilix-webmail-retrieve-files(5934)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5934'}]
CVE State: PUBLISHED
Explain CVE-2001-1045
Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.
Affected Products: n/a
References: [{'name': '2995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2995'}, {'name': '20010706 basilix bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0114.html'}, {'name': 'basilix-webmail-view-files(6873)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6873'}]
CVE State: PUBLISHED
Explain CVE-2001-1046
Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.
Affected Products: n/a
References: [{'name': 'CSSA-2001-SCO.8', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html'}, {'name': '2811', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2811'}, {'name': '20010602 Qpopper 4.0.3 **** Fixes Buffer Overflow **** (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/188267'}, {'name': '20010420 Qpopper 4.0 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=98777649031406&w=2'}, {'name': 'qpopper-username-bo(6647)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6647'}]
CVE State: PUBLISHED
Explain CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
Affected Products: n/a
References: [{'name': '20010602 Locally exploitable races in OpenBSD VFS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2001/Jun/0020.html'}, {'name': '2817', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2817'}, {'name': 'openbsd-dup2-race-dos(6660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6660'}, {'name': 'openbsd-pipe-race-dos(6661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6661'}, {'name': '2818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2818'}]
CVE State: PUBLISHED
Explain CVE-2001-1048
AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': '3387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3387'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.geocrawler.com/archives/3/14414/2001/9/0/6668723/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.gospelcom.net/mnn/topher/awol/changelog.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1049
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://phorecast.org/'}, {'name': '3388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3388'}]
CVE State: PUBLISHED