Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-1235
pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3395', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3395'}]
CVE State: PUBLISHED
Explain CVE-2001-1236
myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3394', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3394'}]
CVE State: PUBLISHED
Explain CVE-2001-1237
Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': 'VU#847803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/847803'}, {'name': '3393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3393'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.peaceworks.ca/phormation/phormation-0.9.2.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2001-1238
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.
Affected Products: n/a
References: [{'name': '20010716 W2k: Unkillable Applications', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/197195'}, {'name': '3033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3033'}, {'name': 'win2k-taskmanager-unkillable-process(6919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6919'}]
CVE State: PUBLISHED
Explain CVE-2001-1240
The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.
Affected Products: n/a
References: [{'name': 'ESA-20010711-02', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1493.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1241
Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!"  and the desired program name.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi-changes.html'}, {'name': 'uncgi-unexecutable-cgi(6847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6847.php'}, {'name': '3057', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3057'}, {'name': '20010718 Re: [Khamba Staring <purrcat@edoropolis.org>] multiple', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi.html'}, {'name': '20010717 multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1242
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.
Affected Products: n/a
References: [{'name': '20010718 Re: [Khamba Staring <purrcat@edoropolis.org>] multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.midwinter.com/~koreth/uncgi-changes.html'}, {'name': 'uncgi-dot-directory-traversal(6846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6846.php'}, {'name': '3056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3056'}, {'name': '20010717 multiple vulnerabilities in un-cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1243
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
Affected Products: n/a
References: [{'name': 'iis-device-asp-dos(6800)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6800.php'}, {'name': '2973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2973'}, {'name': '20010704 NERF Advisory #4: MS IIS local and remote DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/194919'}]
CVE State: PUBLISHED
Explain CVE-2001-1244
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
Affected Products: n/a
References: [{'name': '20010708 Small TCP packets == very large overhead == DoS?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/195457'}, {'name': 'tcp-mss-dos(6824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6824'}, {'name': '2997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2997'}]
CVE State: PUBLISHED
Explain CVE-2001-1245
Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.
Affected Products: n/a
References: [{'name': '20010712 Re: Opera Browser Heap Overflow (Session Replay Attack)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196980'}, {'name': '3012', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3012'}, {'name': 'opera-browser-header-bo(6838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6838.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1246
PHP 4.0.5 through 4.1.0 in safe mode does not properly cleanse the 5th parameter to the mail() function, which allows local users and possibly remote attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': 'RHSA-2003:159', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-159.html'}, {'name': 'RHSA-2002:129', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-129.html'}, {'name': 'php-safemode-elevate-privileges(6787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6787.php'}, {'name': '2954', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2954'}, {'name': '20010630 php breaks safe mode', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194425'}, {'name': 'RHSA-2002:102', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-102.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2001-1247
PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.
Affected Products: n/a
References: [{'name': '20010630 php breaks safe mode', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194425'}, {'name': '5440', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5440'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz'}, {'name': 'RHSA-2002:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-035.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1248
vWebServer 1.2.0 allows remote attackers to view arbitrary ASP scripts via a request for an ASP script that ends with a URL-encoded space character (%20).
Affected Products: n/a
References: [{'name': '2975', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2975'}, {'name': 'vwebserver-asp-reveal-source(6769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6769.php'}, {'name': '20010629 4 New vulns. vWebServer and SmallHTTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194418'}]
CVE State: PUBLISHED
Explain CVE-2001-1249
vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
Affected Products: n/a
References: [{'name': '20010629 4 New vulns. vWebServer and SmallHTTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194418'}, {'name': '2978', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2978'}]
CVE State: PUBLISHED
Explain CVE-2001-1250
vWebServer 1.2.0 allows remote attackers to cause a denial of service (hang) via a small number of long URL requests, possibly due to a buffer overflow.
Affected Products: n/a
References: [{'name': 'vwebserver-long-url-dos(6771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6771.php'}, {'name': '20010629 4 New vulns. vWebServer and SmallHTTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194418'}, {'name': '2979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2979'}]
CVE State: PUBLISHED
Explain CVE-2001-1251
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
Affected Products: n/a
References: [{'name': 'vwebserver-long-url-dos(6771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6771.php'}, {'name': '20010629 4 New vulns. vWebServer and SmallHTTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/194418'}, {'name': '2980', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2980'}]
CVE State: PUBLISHED
Explain CVE-2001-1252
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
Affected Products: n/a
References: [{'name': '1955', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1955'}, {'name': '20010928 SNS-43: PGP Keyserver Permissions Misconfiguration', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pgp.com/support/product-advisories/keyserver.asp'}, {'name': '4193', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4193'}, {'name': 'pgp-keyserver-http-dos(7203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7203.php'}, {'name': '3375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3375'}]
CVE State: PUBLISHED
Explain CVE-2001-1253
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.
Affected Products: n/a
References: [{'name': '20010927 Two problems with Alexis/InternetPBX from COM2001', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/217200'}, {'name': 'alexis-http-plaintext-information(7205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7205.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1254
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
Affected Products: n/a
References: [{'name': '3373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3373'}, {'name': '20010927 Two problems with Alexis/InternetPBX from COM2001', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/217200'}]
CVE State: PUBLISHED
Explain CVE-2001-1255
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.
Affected Products: n/a
References: [{'name': 'winmysqladmin-password-plaintext(7206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7206.php'}, {'name': '20011002 WinMySQLadmin 1.1 Store MySQL password in clear text', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/217848'}, {'name': '3381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3381'}]
CVE State: PUBLISHED
Explain CVE-2001-1256
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5628', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5628'}, {'name': '20010604 yet another sym link followers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/188568'}, {'name': 'L-093', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-093.shtml'}, {'name': '2821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2821'}, {'name': 'VU#127435', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/127435'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92'}, {'name': 'HPSBUX0106-153', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3354'}, {'name': 'hpux-kmmodreg-symlink(6656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6656'}]
CVE State: PUBLISHED
Explain CVE-2001-1257
Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.
Affected Products: n/a
References: [{'name': 'CLA-2001:410', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410'}, {'name': 'CSSA-2001-027.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt'}, {'name': 'DSA-073', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-073'}, {'name': 'imp-cross-site-scripting(6905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6905.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://online.securityfocus.com/archive/1/198495'}, {'name': '20010721 IMP 2.2.6 (SECURITY) released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/198495'}, {'name': '3082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3082'}]
CVE State: PUBLISHED
Explain CVE-2001-1258
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
Affected Products: n/a
References: [{'name': 'imp-prefslang-gain-privileges(6906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6906.php'}, {'name': 'CLA-2001:410', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410'}, {'name': 'CSSA-2001-027.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2001-027.0.txt'}, {'name': 'DSA-073', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-073'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://online.securityfocus.com/archive/1/198495'}, {'name': '3083', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3083'}, {'name': '20010721 IMP 2.2.6 (SECURITY) released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/198495'}]
CVE State: PUBLISHED
Explain CVE-2001-1259
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.
Affected Products: n/a
References: [{'name': '20010807 Multiple vulnerabilities in Avaya Argent Office', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/202344'}, {'name': 'argent-office-udp-dos(6953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6953.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1260
Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator privileges by sniffing and decrypting the sniffing the passwords during a system reboot.
Affected Products: n/a
References: [{'name': '20010807 Multiple vulnerabilities in Avaya Argent Office', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/202344'}, {'name': 'argent-office-weak-encryption(6954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6954.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1261
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
Affected Products: n/a
References: [{'name': '20010807 Multiple vulnerabilities in Avaya Argent Office', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/202344'}, {'name': 'argent-office-change-music(6956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6956.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1262
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string.
Affected Products: n/a
References: [{'name': '20010807 Multiple vulnerabilities in Avaya Argent Office', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/202344'}, {'name': 'argent-office-community-string(6955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6955.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1263
telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.
Affected Products: n/a
References: [{'name': '2834', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2834'}, {'name': '20010606 advisory for Pragma Interaccess', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/189327'}, {'name': 'pragma-interaccess-dos(6658)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6658'}]
CVE State: PUBLISHED
Explain CVE-2001-1264
Vulnerability in mkacct in HP-UX 11.04 running Virtualvault Operating System (VVOS) 4.0 and 4.5 allows attackers to elevate privileges.
Affected Products: n/a
References: [{'name': 'HPSBUX0107-161', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3459'}, {'name': 'hp-virtualvault-mkacct-privilege-elevation(6867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6867'}, {'name': 'VU#420475', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/420475'}, {'name': '3072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3072'}, {'name': 'L-119', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-119.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-1265
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': 'ibm-tftp-directory-traversal(6864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6864'}, {'name': '20010720 IBM TFTP Server for Java vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/198297'}, {'name': '3076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3076'}]
CVE State: PUBLISHED
Explain CVE-2001-1266
Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://dnhttpd.sourceforge.net/changelog.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1267
Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
Affected Products: n/a
References: [{'name': '47800', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1'}, {'name': 'RHSA-2002:096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-096.html'}, {'name': '20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196445'}, {'name': 'CLA-2002:538', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538'}, {'name': 'archive-extraction-directory-traversal(10224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10224.php'}, {'name': 'RHSA-2002:138', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-138.html'}, {'name': 'MDKSA-2002:066', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:066'}, {'name': 'HPSBTL0209-068', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4514'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz'}, {'name': 'RHSA-2003:218', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-218.html'}, {'name': '3024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3024'}]
CVE State: PUBLISHED
Explain CVE-2001-1268
Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.
Affected Products: n/a
References: [{'name': '47800', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1'}, {'name': '20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196445'}, {'name': '1000928', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/pub/infozip/UnZip.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1269
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.
Affected Products: n/a
References: [{'name': '47800', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1'}, {'name': '20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196445'}, {'name': '1000928', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/pub/infozip/UnZip.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1270
Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.
Affected Products: n/a
References: [{'name': '20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196445'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.nnov.ru/advisories/archdt.asp'}]
CVE State: PUBLISHED
Explain CVE-2001-1271
Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a ..  (dot dot) attack on archived filenames.
Affected Products: n/a
References: [{'name': '20010712 SECURITY.NNOV: directory traversal and path globing in multiple archivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/196445'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security.nnov.ru/advisories/archdt.asp'}]
CVE State: PUBLISHED
Explain CVE-2001-1272
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.
Affected Products: n/a
References: [{'name': '3658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3658'}, {'name': 'DSA-092', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-092'}, {'name': 'wmtv-execute-commands(7669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7669.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1273
The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).
Affected Products: n/a
References: [{'name': 'L-045', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://ciac.llnl.gov/ciac/bulletins/l-045.shtml'}, {'name': 'RHSA-2001:013', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-013.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1274
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
Affected Products: n/a
References: [{'name': 'CLA-2001:375', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000375'}, {'name': 'DSA-013', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-013'}, {'name': 'MDKSA-2001:014', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3'}, {'name': 'RHSA-2001:003', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-003.html'}, {'name': 'FreeBSD-SA-01:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://marc.info/?l=bugtraq&m=98089552030459&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mysql.com/documentation/mysql/bychapter/manual_News.html#News-3.23.3'}, {'name': 'CSSA-2001-006.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-1275
MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.
Affected Products: n/a
References: [{'name': 'MDKSA-2001:014', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-014.php3'}, {'name': 'RHSA-2001:003', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-003.html'}, {'name': 'FreeBSD-SA-01:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://marc.info/?l=bugtraq&m=98089552030459&w=2'}, {'name': 'CSSA-2001-006.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-1276
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
Affected Products: n/a
References: [{'name': 'RHSA-2001:074', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-074.html'}, {'name': '20010621 ispell update -- Immunix OS 6.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99317439131174&w=2'}, {'name': 'MDKSA-2001:058', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3'}, {'name': 'IMNX-2001-62-004-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01'}]
CVE State: PUBLISHED
Explain CVE-2001-1277
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=41805'}, {'name': '20010611 man 1.5h10 + man 1.5i-4 exploits', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99227597227747&w=2'}, {'name': 'RHSA-2001:072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-072.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1278
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
Affected Products: n/a
References: [{'name': 'MDKSA-2001:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3'}, {'name': 'RHSA-2001:115', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-115.html'}, {'name': '3425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3425'}]
CVE State: PUBLISHED
Explain CVE-2001-1279
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
Affected Products: n/a
References: [{'name': 'MDKSA-2002:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-032.php'}, {'name': 'VU#797201', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/797201'}, {'name': 'CSSA-2002-025.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt'}, {'name': 'RHSA-2001:089', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-089.html'}, {'name': 'tcpdump-afs-rpc-bo(7006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7006.php'}, {'name': '3065', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3065'}, {'name': 'CLA-2002:480', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000480'}, {'name': 'FreeBSD-SA-01:48', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:48.tcpdump.asc'}]
CVE State: PUBLISHED
Explain CVE-2001-1280
POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.
Affected Products: n/a
References: [{'name': '3424', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3424'}, {'name': '20011011 Vulnerabilities in Ipswitch IMail Server 7.04', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.
Affected Products: n/a
References: [{'name': '3429', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3429'}, {'name': '20011011 Vulnerabilities in Ipswitch IMail Server 7.04', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1282
Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information.
Affected Products: n/a
References: [{'name': '3426', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3426'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '20011011 Ipswitch Imail 7.04 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1283
The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflow that may allow execution of arbitrary code.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '3427', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3427'}, {'name': '20011011 Ipswitch Imail 7.04 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1284
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '3428', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3428'}, {'name': '20011011 Ipswitch Imail 7.04 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1285
Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter.
Affected Products: n/a
References: [{'name': '3432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3432'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '20011011 Ipswitch Imail 7.04 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.
Affected Products: n/a
References: [{'name': '3432', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3432'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '20020310 IMail Account hijack through the Web Interface', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/261096'}, {'name': '20011011 Ipswitch Imail 7.04 vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1287
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Affected Products: n/a
References: [{'name': '20011012 def-2001-29', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0083.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ipswitch.com/Support/IMail/news.html'}, {'name': '3431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3431'}]
CVE State: PUBLISHED
Explain CVE-2001-1288
Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe.
Affected Products: n/a
References: [{'name': '20010801 F7-Enter bug details & workaround', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/201151'}, {'name': '20010729 Re: w2k dos', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99640583014377&w=2'}, {'name': '20010730 RE: bug w2k', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=99651044701417&w=2'}, {'name': '20010727 bug w2k', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/200118'}, {'name': '20010731 NT TS / Win 2K and F7 - Enter bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/200985'}, {'name': '3115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3115'}]
CVE State: PUBLISHED
Explain CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.
Affected Products: n/a
References: [{'name': '3123', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3123'}, {'name': '20010730 ADV: Quake 3 Arena 1.29f/g Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0748.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1290
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
Affected Products: n/a
References: [{'name': '2942', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2942'}, {'name': 'active-classifieds-admin-access(6754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6754'}, {'name': '20010627 Active Web Classifieds failure to authenticate leads to arbitrary code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-06/0386.html'}, {'name': '12326', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/12326'}]
CVE State: PUBLISHED
Explain CVE-2001-1291
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
Affected Products: n/a
References: [{'name': '3com-telnetd-brute-force(6855)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6855'}, {'name': '20010712 3Com TelnetD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/196957'}, {'name': '3034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3034'}]
CVE State: PUBLISHED
Explain CVE-2001-1292
Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.
Affected Products: n/a
References: [{'name': 'sambar-telnet-bo(6973)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6973.php'}, {'name': '20010813 Sambar Telnet Proxy/Server multiple vulnerablietis', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0160.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1293
Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
Affected Products: n/a
References: [{'name': '20010926 3Com(r) HomeConnect(r) Cable Modem    Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0217.html'}, {'name': '3366', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3366'}, {'name': 'VU#500027', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/500027'}]
CVE State: PUBLISHED
Explain CVE-2001-1294
Buffer overflow in A-V Tronics Inetserv 3.2.1 and earlier allows remote attackers to cause a denial of service (crash) in the Webmail interface via a long username and password.
Affected Products: n/a
References: [{'name': '3224', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3224'}, {'name': '20000117 Remote Buffer Exploit - InetServ 3.0', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0001&L=ntbugtraq&F=P&S=&P=4592'}, {'name': 'inetserv-webmail-bo(7022)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7022.php'}]
CVE State: PUBLISHED
Explain CVE-2001-1295
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.greenepa.net/~averett/cerberus-releasenotes.htm#ReleaseNotes'}, {'name': 'cerberus-ftp-directory-traversal(7004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7004.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securiteam.com/windowsntfocus/5SP0M0055W.html'}]
CVE State: PUBLISHED
Explain CVE-2001-1296
More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Products: n/a
References: [{'name': '20011002 results of semi-automatic source code audit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html'}, {'name': 'php-includedir-code-execution(7215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7215.php'}, {'name': '3383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3383'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.moregroupware.org/index.php?action=detail&news_id=24'}]
CVE State: PUBLISHED