Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0563
ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23.
Affected Products: n/a
References: [{'name': '20010507 Advisory for Electrocomm 2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0049.html'}, {'name': 'electrocomm-telnet-dos(6514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6514'}, {'name': '2706', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2706'}]
CVE State: PUBLISHED
Explain CVE-2001-0564
APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card.
Affected Products: n/a
References: [{'name': 'apc-telnet-dos(6199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6199'}, {'name': '2430', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2430'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt'}, {'name': '20010225 APC web/snmp/telnet management card dos', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0565
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
Affected Products: n/a
References: [{'name': 'solaris-mailx-f-bo(8246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8246'}, {'name': '2610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2610'}, {'name': '20010511 Solaris /usr/bin/mailx exploit (SPARC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/184210'}, {'name': 'VU#446864', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/446864'}, {'name': '20010502 Solaris mailx Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0016.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0566
Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP  is disabled.
Affected Products: n/a
References: [{'name': '20010503 Cisco Catalyst 2900XL crashes with empty UDP packet when SNMP is disabled.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0040.html'}, {'name': 'cisco-catalyst-udp-dos(6515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6515'}]
CVE State: PUBLISHED
Explain CVE-2001-0567
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.
Affected Products: n/a
References: [{'name': 'MDKSA-2001:049', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-049.php3'}, {'name': 'zope-zclass-gain-privileges(6958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6958'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zope.org/Products/Zope/Hotfix_2001-05-01/security_alert'}, {'name': 'DSA-055', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-055'}, {'name': 'RHSA-2001:065', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-065.html'}, {'name': 'CLA-2001:407', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000407'}]
CVE State: PUBLISHED
Explain CVE-2001-0568
Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.
Affected Products: n/a
References: [{'name': 'DSA-043', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-043'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23'}, {'name': 'RHSA-2001:021', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-021.html'}, {'name': 'MDKSA-2001:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3'}, {'name': 'CLA-2001:382', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382'}]
CVE State: PUBLISHED
Explain CVE-2001-0569
Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet.
Affected Products: n/a
References: [{'name': 'DSA-043', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-043'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.zope.org/Products/Zope/Products/Zope/Products/Zope/Hotfix_2001-02-23'}, {'name': 'RHSA-2001:021', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-021.html'}, {'name': 'MDKSA-2001:025', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3'}, {'name': 'CLA-2001:382', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382'}]
CVE State: PUBLISHED
Explain CVE-2001-0570
minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.
Affected Products: n/a
References: [{'name': '20010503 minicom exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/181922'}, {'name': 'RHSA-2001:067', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-067.html'}, {'name': 'minicom-xmodem-format-string(6498)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6498'}, {'name': '20010517 Immunix OS Security update for minicom', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99014300904714&w=2'}, {'name': 'CSSA-2001-016.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-016.0.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0571
Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL.
Affected Products: n/a
References: [{'name': '2520', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2520'}, {'name': '2519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2519'}, {'name': '20010323 Elron IM Products Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98538867727489&w=2'}, {'name': '20010326 http://archives.neohapsis.com/archives/bugtraq/2001-03/0345.html', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98567864203963&w=2'}, {'name': '20010406 http://archives.neohapsis.com/archives/bugtraq/2001-03/0345.html', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0382.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0572
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
Affected Products: n/a
References: [{'name': 'MDKSA-2001:033', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-033.php3'}, {'name': 'RHSA-2001:033', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-033.html'}, {'name': '20010318 Passive Analysis of SSH (Secure Shell) Traffic', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.html'}, {'name': 'CLA-2001:391', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391'}, {'name': 'VU#596827', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/596827'}]
CVE State: PUBLISHED
Explain CVE-2001-0573
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
Affected Products: n/a
References: [{'name': 'IY16909', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://archives.neohapsis.com/archives/aix/2001-q2/0000.html'}, {'name': 'VU#123651', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/123651'}, {'name': '5582', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5582'}, {'name': 'aix-lsfs-path(7007)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7007'}]
CVE State: PUBLISHED
Explain CVE-2001-0574
Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
Affected Products: n/a
References: [{'name': 'mp3mystic-dot-directory-traversal(6504)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6504'}, {'name': '1815', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1815'}, {'name': '2699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2699'}, {'name': '20010507 Advisory for MP3Mystic', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0046.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mp3mystic.com/mp3mystic/news.phtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0575
Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.
Affected Products: n/a
References: [{'name': 'sco-openserver-lpshut-bo(6290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6290'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}, {'name': '20010327 SCO 5.0.6 issues (lpshut)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0404.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0576
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a  local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
Affected Products: n/a
References: [{'name': '20010327 SCO 5.0.6 issues (lpusers)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0407.html'}, {'name': 'sco-openserver-lpusers-bo(6292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6292'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0577
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
Affected Products: n/a
References: [{'name': 'sco-openserver-recon-bo(6289)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6289'}, {'name': '20010327 SCO 5.0.6 issues (recon)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0410.html'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0578
Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.
Affected Products: n/a
References: [{'name': 'sco-openserver-lpforms-bo(6293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6293'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}, {'name': '20010327 SCO 5.0.6 issues (lpforms)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0579
lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.
Affected Products: n/a
References: [{'name': 'sco-openserver-lpadmin-bo(6291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6291'}, {'name': '20010327 SCO 5.0.6 issues (lpadmin)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0421.html'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0580
Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.
Affected Products: n/a
References: [{'name': '200105007 Advisory for Vdns', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0050.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0581
Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.
Affected Products: n/a
References: [{'name': '2701', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2701'}, {'name': 'spynet-connection-dos(6509)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6509'}, {'name': '20010507 Advisory for Spynet Chat', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0051.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0582
Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.
Affected Products: n/a
References: [{'name': 'crushftp-directory-traversal(6495)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6495'}, {'name': '20010503 Vulnerabilities in CrushFTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html'}, {'name': 'VU#110803', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/110803'}]
CVE State: PUBLISHED
Explain CVE-2001-0583
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001.
Affected Products: n/a
References: [{'name': '20010315 def-2001-11: MDaemon 3.5.4 Dos-Device DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0188.html'}, {'name': 'mdaemon-webservices-dos(6240)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://ftp1.deerfield.com/pub/mdaemon/Archive/3.5.6/'}]
CVE State: PUBLISHED
Explain CVE-2001-0584
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.
Affected Products: n/a
References: [{'name': 'mdaemon-imap-command-dos(6279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6279'}, {'name': '20010325 MDaemon IMAP Denial Of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0365.html'}, {'name': '2508', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2508'}]
CVE State: PUBLISHED
Explain CVE-2001-0585
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.
Affected Products: n/a
References: [{'name': '2494', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2494'}, {'name': 'ntmail-long-url-dos(6249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6249'}, {'name': '20010320 def-2001-13: NTMail Web Services DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0248.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.
Affected Products: n/a
References: [{'name': '5581', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5581'}, {'name': "20010330 STAT Security Advisory: Trend Micro's ScanMail for Exchange store s passwords in registry unprotected", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/ntbugtraq/2001-q1/0049.html'}, {'name': 'scanmail-reveals-credentials(6311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6311'}]
CVE State: PUBLISHED
Explain CVE-2001-0587
deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Affected Products: n/a
References: [{'name': '20010327 SCO 5.0.6 MMDF issues (deliver)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0418.html'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}, {'name': 'sco-openserver-deliver-bo(6302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6302'}, {'name': '2583', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2583'}]
CVE State: PUBLISHED
Explain CVE-2001-0588
sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Affected Products: n/a
References: [{'name': '20010327 SCO 5.0.6 MMDF issues (sendmail 8.9.3)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html'}, {'name': '20010412 SSE072B: SCO OpenServer revision of buffer overflow fixes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0589
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
Affected Products: n/a
References: [{'name': 'netscreen-screenos-bypass-firewall(6317)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6317'}, {'name': '1780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1780'}, {'name': '2523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2523'}, {'name': '20010326 Netscreen: DMZ Network Receives Some "Denied" Traffic', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0375.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0590
Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
Affected Products: n/a
References: [{'name': '20010403 Re: Tomcat may reveal script source code by URL trickery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0031.html'}, {'name': 'HPSBTL0112-004', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0112-004'}, {'name': 'jakarta-tomcat-jsp-source(6971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6971'}, {'name': '5580', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5580'}]
CVE State: PUBLISHED
Explain CVE-2001-0591
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
Affected Products: n/a
References: [{'name': '2286', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2286'}, {'name': '20010212 Patch for Potential Vulnerability in the execution of JSPs outside doc_root', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0239.html'}, {'name': 'oracle-handlers-directory-traversal(5986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5986'}]
CVE State: PUBLISHED
Explain CVE-2001-0592
Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP packets.
Affected Products: n/a
References: [{'name': '20010405 def-2001-18: Watchguard Firebox II Kernel DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0054.html'}, {'name': 'firebox-kernel-dos(6327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6327'}]
CVE State: PUBLISHED
Explain CVE-2001-0593
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://anacondapartners.com/cgi-local/apexec.pl?template=ap_releasenotestemplate.html&f1=ap_af_updates_menu&f2=ap_af_releasenotes_clip'}, {'name': '2512', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2512'}, {'name': 'anaconda-clipper-directory-traversal(6286)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6286'}, {'name': '20010327 advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0395.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0594
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.
Affected Products: n/a
References: [{'name': 'solaris-kcms-command-bo(6359)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6359'}, {'name': 'oval:org.mitre.oval:def:7', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7'}, {'name': '20010409 Solaris kcms_configure vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0140.html'}, {'name': '2558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2558'}, {'name': 'oval:org.mitre.oval:def:65', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A65'}]
CVE State: PUBLISHED
Explain CVE-2001-0595
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.
Affected Products: n/a
References: [{'name': '20010411 [LSD] Solaris kcsSUNWIOsolf.so and dtsession vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html'}, {'name': '2605', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2605'}, {'name': 'solaris-kcssunwiosolf-bo(6365)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6365'}]
CVE State: PUBLISHED
Explain CVE-2001-0596
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
Affected Products: n/a
References: [{'name': 'CLA-2001:393', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393'}, {'name': 'RHSA-2001:046', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-046.html'}, {'name': '20010409 Netscape 4.76 gif comment flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98685237415117&w=2'}, {'name': '2637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2637'}, {'name': '5579', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5579'}, {'name': 'netscape-javascript-access-data(6344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6344'}, {'name': 'IMNX-2001-70-014-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01'}, {'name': 'DSA-051', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-051'}]
CVE State: PUBLISHED
Explain CVE-2001-0597
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack.  This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.
Affected Products: n/a
References: [{'name': '2567', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2567'}, {'name': '20010410 Catastrophic failure of Strip password generation.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html'}, {'name': 'strip-weak-passwords(6362)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6362'}]
CVE State: PUBLISHED
Explain CVE-2001-0598
Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.
Affected Products: n/a
References: [{'name': '2570', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2570'}, {'name': 'ghost-configuration-server-dos(6357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6357'}, {'name': '20010411 def-2001-21: Ghost Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0599
Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638.
Affected Products: n/a
References: [{'name': 'ghost-database-engine-dos(6356)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6356'}, {'name': '20010411 def-2001-21: Ghost Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html'}, {'name': '2572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2572'}]
CVE State: PUBLISHED
Explain CVE-2001-0600
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.
Affected Products: n/a
References: [{'name': 'lotus-domino-header-dos(6347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6347'}, {'name': '20010411 def-2001-20: Lotus Domino Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0601
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.
Affected Products: n/a
References: [{'name': 'lotus-domino-unicode-dos(6349)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6349'}, {'name': '20010411 def-2001-20: Lotus Domino Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0602
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices.
Affected Products: n/a
References: [{'name': 'lotus-domino-device-dos(6348)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6348'}, {'name': '20010411 def-2001-20: Lotus Domino Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0603
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148.
Affected Products: n/a
References: [{'name': 'lotus-domino-corba-dos(6350)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6350'}, {'name': '20010411 def-2001-20: Lotus Domino Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0604
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters.
Affected Products: n/a
References: [{'name': 'lotus-domino-url-dos(6351)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6351'}, {'name': '20010411 def-2001-20: Lotus Domino Multiple DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0605
Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.
Affected Products: n/a
References: [{'name': '20010226 My Getright Unsupervised File Download Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98321819112158&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0606
Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
Affected Products: n/a
References: [{'name': 'hp-virtualvault-iws-dos(6110)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6110'}, {'name': 'HPSBUX0102-139', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0041.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0607
asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:5621', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5621'}, {'name': 'HPSBUX0103-145', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0080.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0608
HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program.
Affected Products: n/a
References: [{'name': 'hp-aif-gain-privileges(6951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6951'}, {'name': 'VU#895496', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/895496'}, {'name': 'HPSBMP0103-011', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q1/0087.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0609
Format string vulnerability in Infodrom cfingerd 1.4.3 and earlier allows a remote attacker to gain additional privileges via a malformed ident reply that is passed to the syslog function.
Affected Products: n/a
References: [{'name': '2576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2576'}, {'name': '20010411 CFINGERD remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0202.html'}, {'name': 'cfingerd-remote-format-string(6364)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6364'}]
CVE State: PUBLISHED
Explain CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
Affected Products: n/a
References: [{'name': 'kfm-tmpfile-symlink(6428)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6428'}, {'name': '20010418 Insecure directory handling in KFM file manager', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0611
Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters.
Affected Products: n/a
References: [{'name': '2723', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2723'}, {'name': '20010514 Becky! 2.00.05 Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0089.html'}, {'name': 'becky-mail-message-bo(6531)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6531'}]
CVE State: PUBLISHED
Explain CVE-2001-0612
McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045.
Affected Products: n/a
References: [{'name': '6288', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6288'}, {'name': '2726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2726'}, {'name': 'remote-desktop-dos(6547)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6547'}, {'name': '20010516 Remote Desktop DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0158.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0613
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.
Affected Products: n/a
References: [{'name': '2730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2730'}, {'name': 'omnihttpd-post-dos(6540)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6540'}, {'name': '20010515 OmniHTTPd Pro Denial of Service Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0131.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0614
Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.
Affected Products: n/a
References: [{'name': 'carello-url-code-execution(6532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6532'}, {'name': '20010514 def-2001-25: Carello E-Commerce Arbitrary Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98991352402073&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.
Affected Products: n/a
References: [{'name': 'freestyle-chat-directory-traversal(6601)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6601'}, {'name': '1841', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1841'}, {'name': '20010525 Advisory for Freestyle Chat server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html'}, {'name': '2776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2776'}]
CVE State: PUBLISHED
Explain CVE-2001-0616
Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).
Affected Products: n/a
References: [{'name': 'freestyle-chat-device-dos(6602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6602'}, {'name': '2777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2777'}, {'name': '20010525 Advisory for Freestyle Chat server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0617
Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled.
Affected Products: n/a
References: [{'name': '20010514 Cable-Router AR220e Portmapper Security-Flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html'}, {'name': 'telesyn-portmapper-access-services(6560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6560'}]
CVE State: PUBLISHED
Explain CVE-2001-0618
Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key.  Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.
Affected Products: n/a
References: [{'name': 'orinoco-rg1000-wep-key(6328)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6328'}, {'name': '20010402 RG-1000 802.11 Residential Gateway default WEP key disclosure flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0619
The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to.  The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear.
Affected Products: n/a
References: [{'name': '20010402 Design Flaw in Lucent/Orinoco 802.11 proprietary access control- closed network', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0620
iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.
Affected Products: n/a
References: [{'name': '20010418 iplanet calendar server 5.0p2 exposes Netscape Admin Server master password', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html'}, {'name': 'iplanet-calendar-plaintext-password(6402)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6402'}]
CVE State: PUBLISHED
Explain CVE-2001-0621
The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.
Affected Products: n/a
References: [{'name': 'L-085', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-085.shtml'}, {'name': 'cisco-css-ftp-commands(6557)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6557'}, {'name': '2745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2745'}, {'name': '20010517 Cisco Content Service Switch 11000 Series FTP Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-ftp-pub.shtml'}, {'name': '1834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1834'}]
CVE State: PUBLISHED
Explain CVE-2001-0622
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
Affected Products: n/a
References: [{'name': 'cisco-css-web-management(6631)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6631'}, {'name': '1848', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1848'}, {'name': '2806', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2806'}, {'name': '20010531 Cisco Content Service Switch 11000 Series Web Management Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0623
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
Affected Products: n/a
References: [{'name': 'DSA-050', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-050'}, {'name': 'saft-sendfiled-execute-code(6430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6430'}, {'name': 'DSA-052', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-052'}]
CVE State: PUBLISHED
Explain CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.
Affected Products: n/a
References: [{'name': 'qnx-fat-file-read(6437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6437'}, {'name': '20010421 QNX FIle Read Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .
Affected Products: n/a
References: [{'name': '20010525 Security Bug in InoculateIT for Linux (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-05/0245.html'}, {'name': '1843', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1843'}, {'name': 'inoculateit-ftpdownload-symlink(6607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6607'}, {'name': '2778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2778'}]
CVE State: PUBLISHED
Explain CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
Affected Products: n/a
References: [{'name': '20010316 WebServer Pro All Version Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-03/0236.html'}, {'name': '2488', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2488'}, {'name': 'website-pro-dir-path(3839)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3839'}]
CVE State: PUBLISHED