Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0372
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.
Affected Products: n/a
References: [{'name': '2499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2499'}, {'name': '20010323 FW: Akopia Interchange E-commerce Package Demo Files Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html'}, {'name': 'akopia-interchange-gain-access(6273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6273'}]
CVE State: PUBLISHED
Explain CVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information.
Affected Products: n/a
References: [{'name': '20010323 NT crash dump files insecure by default', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html'}, {'name': '2501', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2501'}, {'name': '5683', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5683'}, {'name': 'win-userdmp-insecure-permission(6275)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6275'}]
CVE State: PUBLISHED
Explain CVE-2001-0374
The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.
Affected Products: n/a
References: [{'name': 'compaq-wbm-bypass-proxy(6264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6264'}, {'name': 'SSRT0715', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://www.compaq.com/products/servers/management/mgtsw-advisory.html'}, {'name': '20010322 Compaq Insight Manager Proxy Vuln', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2001-q1/0779.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0375
Cisco PIX Firewall 515 and 520 with 5.1.4 OS running aaa authentication to a TACACS+ server allows remote attackers to cause a denial of service via a large number of authentication requests.
Affected Products: n/a
References: [{'name': '2551', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2551'}, {'name': 'cisco-pix-tacacs-dos(6353)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6353'}, {'name': '20010406 PIX Firewall 5.1 DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98658271707833&w=2'}, {'name': '20011003 Cisco PIX Firewall Authentication Denial of Service Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/pixfirewall-authen-flood-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0376
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys.  This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used.
Affected Products: n/a
References: [{'name': '20010327 SonicWall IKE pre-shared key length bug and security concern', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html'}, {'name': 'sonicwall-ike-shared-keys(6304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6304'}]
CVE State: PUBLISHED
Explain CVE-2001-0377
Infradig Inframail prior to 3.98a allows a remote attacker to create a denial of service via a malformed POST request which includes a space followed by a large string.
Affected Products: n/a
References: [{'name': 'inframail-post-dos(6297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6297'}, {'name': '20010328 Inframail Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0428.html'}, {'name': '5685', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5685'}]
CVE State: PUBLISHED
Explain CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch'}, {'name': '5680', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5680'}, {'name': 'bsd-readline-permissions(6586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6586'}]
CVE State: PUBLISHED
Explain CVE-2001-0379
Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.
Affected Products: n/a
References: [{'name': '5681', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5681'}, {'name': 'hp-newgrp-additional-privileges(6282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6282'}, {'name': 'HPSBUX0103-147', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0101.html'}, {'name': 'VU#249224', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/249224'}]
CVE State: PUBLISHED
Explain CVE-2001-0380
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.
Affected Products: n/a
References: [{'name': '200103 ILMI community in olicom/crosscomm routers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html'}, {'name': 'oval:org.mitre.oval:def:5718', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718'}]
CVE State: PUBLISHED
Explain CVE-2001-0381
The OpenPGP PGP standard allows an attacker to determine the private signature key via a cryptanalytic attack in which the attacker alters the encrypted private key file and captures a single message signed with the signature key.
Affected Products: n/a
References: [{'name': '20010319 Have they found a serious PGP vulnerability?!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0252.html'}, {'name': '20010322 Re: Yes, they have found a serious PGP vulnerability...sort of', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0311.html'}, {'name': '20010320 Yes, they have found a serious PGP vulnerability...sort of', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0274.html'}, {'name': '11966', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/11966'}, {'name': 'CSSA-2001-017.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-017.0.txt'}, {'name': 'openpgp-private-key-disclosure(6558)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6558'}, {'name': 'RHSA-2001:063', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-063.html'}, {'name': '2673', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2673'}]
CVE State: PUBLISHED
Explain CVE-2001-0382
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application.
Affected Products: n/a
References: [{'name': '20010327 CA CCC\\Harvest exploit', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.
Affected Products: n/a
References: [{'name': '20010401 Php-nuke exploit...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://phpnuke.org/download.php?dcategory=Fixes'}, {'name': '2544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2544'}, {'name': 'php-nuke-url-redirect(6342)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6342'}]
CVE State: PUBLISHED
Explain CVE-2001-0384
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
Affected Products: n/a
References: [{'name': '2606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2606'}, {'name': '20010414 Re: Reliant Unix 5.43 / 5.44 ICMP port unreachable problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/176709'}]
CVE State: PUBLISHED
Explain CVE-2001-0385
GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
Affected Products: n/a
References: [{'name': '81099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/81099'}, {'name': '20010417 Advisory for GoAhead Webserver v2.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0281.html'}, {'name': 'goahead-aux-dos(6400)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6400'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://freecode.com/projects/embedthis-goahead-webserver/releases/343539'}, {'name': '2607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2607'}, {'name': '6664', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6664'}]
CVE State: PUBLISHED
Explain CVE-2001-0386
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
Affected Products: n/a
References: [{'name': '3781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3781'}, {'name': 'analogx-simpleserver-aux-dos(6395)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6395'}, {'name': '20010417 Advisory for SimpleServer:WWW (analogX)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/177156'}, {'name': '2608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2608'}]
CVE State: PUBLISHED
Explain CVE-2001-0387
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
Affected Products: n/a
References: [{'name': 'hylafax-hfaxd-format-string(6377)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6377'}, {'name': '20010415 **SECURITY ADVISORY** - HylaFAX format string vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html'}, {'name': '2574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2574'}, {'name': '20010412 HylaFAX vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/175963'}, {'name': '5679', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5679'}, {'name': 'FreeBSD-SA-01:34', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html'}, {'name': 'SuSE-SA:2001:15', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html'}, {'name': 'MDKSA-2001:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-041.php3'}]
CVE State: PUBLISHED
Explain CVE-2001-0388
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2001:07', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_007_nkitserv.html'}, {'name': 'timed-remote-dos(6228)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6228'}, {'name': 'MDKSA-2001:034', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-034.php3'}, {'name': 'FreeBSD-SA-01:28', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:28.timed.asc'}]
CVE State: PUBLISHED
Explain CVE-2001-0389
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.
Affected Products: n/a
References: [{'name': '2587', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2587'}, {'name': '20010413 [LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/176100'}]
CVE State: PUBLISHED
Explain CVE-2001-0390
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.
Affected Products: n/a
References: [{'name': '20010413 [LoWNOISE] IBM Websphere/NetCommerce3 DoS and one more.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/176100'}, {'name': '2588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2588'}]
CVE State: PUBLISHED
Explain CVE-2001-0391
Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
Affected Products: n/a
References: [{'name': '20010417 Advisory for Xitami 2.4d7, 2.5d4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0392
Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long string to the server port (2407), which causes the server to crash.
Affected Products: n/a
References: [{'name': '20010403 def-2001-17: Navision Financials Server DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98633100728473&w=2'}, {'name': '2539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2539'}]
CVE State: PUBLISHED
Explain CVE-2001-0393
Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits.
Affected Products: n/a
References: [{'name': '20010404 Re: def-2001-17: Navision Financials Server DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98637870623514&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0394
Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to the /dyn directory.
Affected Products: n/a
References: [{'name': '20010328 def-2001-15: Website Pro Remote Manager DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0425.html'}, {'name': 'website-pro-remote-dos(6295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6295'}, {'name': '5669', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5669'}]
CVE State: PUBLISHED
Explain CVE-2001-0395
Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brute force password guessing.
Affected Products: n/a
References: [{'name': '20010410 Console 3200 telnetd problem.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html'}, {'name': '2578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2578'}]
CVE State: PUBLISHED
Explain CVE-2001-0396
The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users.
Affected Products: n/a
References: [{'name': '20010410 Console 3200 telnetd problem.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html'}, {'name': '2578', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2578'}]
CVE State: PUBLISHED
Explain CVE-2001-0397
Buffer overflow in Silent Runner Collector (SRC) 1.6.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long SMTP HELO command.
Affected Products: n/a
References: [{'name': '20010329 Silent Runner Collector - HELO buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0454.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0398
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT!  to misrepresent the attachment's type with a different icon.
Affected Products: n/a
References: [{'name': '2530', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2530'}, {'name': '20010402 ~..~!guano', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0399
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.
Affected Products: n/a
References: [{'name': '2533', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2533'}, {'name': '20010403 CHINANSL Security Advisory(CSA-200111)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98633597813833&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0400
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.
Affected Products: n/a
References: [{'name': '20010410 CGI - nph-maillist.pl vulnerability...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/175506'}, {'name': '2563', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2563'}]
CVE State: PUBLISHED
Explain CVE-2001-0401
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': 'solaris-tip-bo(6284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6284'}, {'name': '2475', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2475'}, {'name': '20010327 Solaris /usr/bin/tip Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0394.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0402
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:32', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html'}, {'name': 'ipfilter-access-ports(6331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6331'}, {'name': '20010408 A fragmentation attack against IP Filter', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98679734015538&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0403
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
Affected Products: n/a
References: [{'name': 'solaris-perfmon-create-files(6267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6267'}, {'name': '20010323 [ Hackerslab bug_paper ] SunOS application perfmon vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0404
Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory.
Affected Products: n/a
References: [{'name': '20010328 CHINANSL Security Advisory(CSA-200106)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98583089425166&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0405
ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.
Affected Products: n/a
References: [{'name': 'RHSA-2001:084', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-084.html'}, {'name': '20010416 Tempest Security Techonologies -- Adivsory #01/2001 -- Linux IPTables', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.html'}, {'name': 'RHSA-2001:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-052.html'}, {'name': '2602', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2602'}, {'name': 'linux-netfilter-iptables(6390)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6390'}, {'name': 'MDKSA-2001:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3'}]
CVE State: PUBLISHED
Explain CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.
Affected Products: n/a
References: [{'name': '20010418 TSLSA-#2001-0005 - samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html'}, {'name': '20010418 PROGENY-SA-2001-05: Samba /tmp vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html'}, {'name': 'CLA-2001:395', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000395'}, {'name': 'CSSA-2001-015.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2001-015.0.txt'}, {'name': '20010417 Samba 2.0.8 security fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html'}, {'name': 'VU#670568', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/670568'}, {'name': '2617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2617'}, {'name': 'MDKSA-2001:040', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-040.php3'}, {'name': 'DSA-048', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-048'}, {'name': 'FreeBSD-SA-01:36', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-04/0608.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0407
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
Affected Products: n/a
References: [{'name': '2522', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2522'}, {'name': '20010318 potential vulnerability of mysqld running with root privileges (can be used as good DoS or r00t expoloit)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html'}, {'name': '20010327 MySQL 3.23.36 is relased (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html'}, {'name': 'mysql-dot-directory-traversal(6617)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6617'}]
CVE State: PUBLISHED
Explain CVE-2001-0408
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
Affected Products: n/a
References: [{'name': 'CSSA-2001-014.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt'}, {'name': 'vim-elevate-privileges(6259)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6259'}, {'name': 'RHSA-2001:008', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-008.html'}, {'name': '20010329 Immunix OS Security update for vim', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98593106111968&w=2'}, {'name': '2510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2510'}, {'name': 'MDKSA-2001:035', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3'}, {'name': 'SuSE-SA:2001:12', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_012_vim.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0409
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.
Affected Products: n/a
References: [{'name': 'CSSA-2001-014.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt'}, {'name': 'vim-tmp-symlink(6628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6628'}, {'name': 'SuSE-SA:2001:12', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_012_vim.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0410
Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long "From" header.
Affected Products: n/a
References: [{'name': '20010330 Virus Buster 2001(ver8.02) Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98593642520755&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0411
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet.
Affected Products: n/a
References: [{'name': '20010406 Reliant Unix 5.43 / 5.44 ICMP port unreachable problem', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98658209505849&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0412
Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode.
Affected Products: n/a
References: [{'name': '1784', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1784'}, {'name': 'cisco-css-elevate-privileges(6322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6322'}, {'name': '2559', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2559'}, {'name': '20010404 Cisco Content Services Switch User Account Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0413
BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which causes the router to hang.
Affected Products: n/a
References: [{'name': '20010409 BINTEC X1200', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98697054804197&w=2'}, {'name': '20010404 BinTec X4000 Access Router DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98644414226344&w=2'}, {'name': 'bintec-x4000-nmap-dos(6323)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6323'}, {'name': '20010410 BinTec Router DoS: Workaround and Details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0145.html'}, {'name': '20010406 X4000 DoS: Details and workaround', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98659862317070&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0415
REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts.
Affected Products: n/a
References: [{'name': '2495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2495'}, {'name': '20010320 Password stored in clear text vulnerability in real time stock trading program', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0275.html'}, {'name': 'rediplus-weak-security(6276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6276'}]
CVE State: PUBLISHED
Explain CVE-2001-0416
sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools.
Affected Products: n/a
References: [{'name': 'RHSA-2001:027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-027.html'}, {'name': '2506', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2506'}, {'name': 'MDKSA-2001:030', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-030.php3'}, {'name': 'DSA-038', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-038'}, {'name': '2683', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2683'}, {'name': 'SuSE-SA:2001:16', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_016_sgmltool_txt.html'}, {'name': 'sgmltools-symlink(6201)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6201'}, {'name': '20010316 Immunix OS Security update for sgml-tools', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98477491130367&w=2'}, {'name': 'CLA-2001:390', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000390'}]
CVE State: PUBLISHED
Explain CVE-2001-0417
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
Affected Products: n/a
References: [{'name': '20010307 Security advisory: Unsafe temporary file handling in krb4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0078.html'}, {'name': 'RHSA-2001:025', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-025.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0418
content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter.
Affected Products: n/a
References: [{'name': '20010413 Exploitable NCM.at - Content Management System', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0223.html'}, {'name': '2584', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2584'}]
CVE State: PUBLISHED
Explain CVE-2001-0419
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.
Affected Products: n/a
References: [{'name': '2569', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2569'}, {'name': '20010410 Oracle Application Server shared library buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98692227816141&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0420
Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter.
Affected Products: n/a
References: [{'name': '2547', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2547'}, {'name': '20010409 talkback.cgi vulnerability may allow users to read any file', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0128.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0421
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
Affected Products: n/a
References: [{'name': '20010417 Re: SUN SOLARIS 5.6/5.7 FTP Globbing Exploit !', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/177200'}, {'name': '2601', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2601'}]
CVE State: PUBLISHED
Explain CVE-2001-0422
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
Affected Products: n/a
References: [{'name': '20010410 Solaris Xsun buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0158.html'}, {'name': 'oval:org.mitre.oval:def:555', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A555'}, {'name': 'solaris-xsun-home-bo(6343)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6343'}, {'name': '2561', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2561'}]
CVE State: PUBLISHED
Explain CVE-2001-0423
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093.
Affected Products: n/a
References: [{'name': 'solaris-ipcs-bo(6369)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6369'}, {'name': '20010412 Solaris ipcs vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0217.html'}, {'name': '2581', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2581'}]
CVE State: PUBLISHED
Explain CVE-2001-0424
BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id.
Affected Products: n/a
References: [{'name': '2609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2609'}, {'name': '20010415 BubbleMon 1.31', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98744422105430&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0425
AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information.
Affected Products: n/a
References: [{'name': '2393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2393'}, {'name': '20010219 Adcycle 0.78b Authentication', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/163942'}]
CVE State: PUBLISHED
Explain CVE-2001-0426
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
Affected Products: n/a
References: [{'name': '20010411 [LSD] Solaris kcsSUNWIOsolf.so and dtsession vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0427
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
Affected Products: n/a
References: [{'name': '20010328 VPN3000 Concentrator TELNET Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml'}, {'name': '5643', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5643'}, {'name': 'cisco-vpn-telnet-dos(6298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6298'}]
CVE State: PUBLISHED
Explain CVE-2001-0428
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option.
Affected Products: n/a
References: [{'name': 'cisco-vpn-ip-dos(6360)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6360'}, {'name': '1786', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1786'}, {'name': '20010412 VPN 3000 Concentrator IP Options Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml'}, {'name': '2573', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2573'}]
CVE State: PUBLISHED
Explain CVE-2001-0429
Cisco Catalyst 5000 series switches 6.1(2) and earlier will forward an 802.1x frame on a Spanning Tree Protocol (STP) blocked port, which causes a network storm and a denial of service.
Affected Products: n/a
References: [{'name': '20010416 Catalyst 5000 Series 802.1x Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cat5k-8021x-vuln-pub.shtml'}, {'name': '2604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2604'}, {'name': 'cisco-catalyst-8021x-dos(6379)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6379'}, {'name': 'L-072', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-072.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0430
Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
Affected Products: n/a
References: [{'name': 'exuberant-ctags-symlink(6388)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6388'}, {'name': '5642', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5642'}, {'name': 'DSA-046', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2001/dsa-046'}]
CVE State: PUBLISHED
Explain CVE-2001-0431
Vulnerability in iPlanet Web Server Enterprise Edition 4.x.
Affected Products: n/a
References: [{'name': '20010417 iPlanet Web Server 4.x Product Alert', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0432
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': '2579', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2579'}, {'name': '20010413 Trend Micro Interscan VirusWall 3.01 vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0218.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0433
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
Affected Products: n/a
References: [{'name': '20010405 Savant 3.0 Denial Of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98655083231635&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0434
The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service.
Affected Products: n/a
References: [{'name': 'compaq-activex-dos(6355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6355'}, {'name': 'SSRT0716', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT0716-01.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.
Affected Products: n/a
References: [{'name': '20010410 [wsir-01/02-03] PGP 7.0 Split Key/Cached Passphrase Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98691775527457&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0436
dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dcscripts.com/FAQ/sec_2001_03_31.html'}, {'name': '3862', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3862'}, {'name': '2611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2611'}, {'name': '20010416 qDefense Advisory: DCForum allows remote read/write/execute', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html'}, {'name': 'dcforum-az-expr(6392)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6392'}]
CVE State: PUBLISHED
Explain CVE-2001-0437
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
Affected Products: n/a
References: [{'name': 'dcforum-az-file-upload(6393)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6393'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dcscripts.com/FAQ/sec_2001_03_31.html'}, {'name': '2611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2611'}, {'name': '20010416 qDefense Advisory: DCForum allows remote read/write/execute', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0438
Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu.
Affected Products: n/a
References: [{'name': "20010418 Hole in Netopia's Mac OS X Timbuktu", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0337.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0439
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Affected Products: n/a
References: [{'name': 'FreeBSD-SA-01:35', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html'}, {'name': 'licq-url-execute-commands(6261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6261'}, {'name': 'MDKSA-2001:032', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3'}, {'name': 'RHSA-2001:023', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-023.html'}, {'name': '5641', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5641'}, {'name': 'RHSA-2001:022', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-022.html'}, {'name': 'CLA-2001:389', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389'}]
CVE State: PUBLISHED