Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2000-1222
AIX sysback before 4.2.1.13 uses a relative path to find and execute the hostname program, which allows local users to gain privileges by modifying the path to point to a malicious hostname program.
Affected Products: n/a
References: [{'name': 'aix-sysback-elevate-privileges(6432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6432'}, {'name': 'VU#17566', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/17566'}]
CVE State: PUBLISHED
Explain CVE-2000-1223
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
Affected Products: n/a
References: [{'name': 'VU#671444', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/671444'}]
CVE State: PUBLISHED
Explain CVE-2000-1224
Caucho Technology Resin 1.2 and possibly earlier allows remote attackers to view JSP source via an HTTP request to a .jsp file with certain characters appended to the file name, such as (1) "..", (2) "%2e..", (3) "%81", (4) "%82", and others.
Affected Products: n/a
References: [{'name': '20001123 Re: RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/146770'}, {'name': '20001123 RESIN ServletExec JSP Source Disclosure Vulnerability(Apache 1.3.6 Win2k))', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97502269408279&w=2'}, {'name': 'resin-jsp-source-disclosure(5568)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5568'}, {'name': '1986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1986'}]
CVE State: PUBLISHED
Explain CVE-2000-1225
Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1226
Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service (crash) by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan.
Affected Products: n/a
References: [{'name': '20000614 Snort 1.6 and nmap 2.54beta1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0122.html'}, {'name': '20000614 Re: Snort 1.6 and nmap 2.54beta1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0126.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1227
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
Affected Products: n/a
References: [{'name': '20000605 anonymous SMB service DoS on nt5 (and TCP DoS on nt4) (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/63322'}, {'name': '1301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/1301'}]
CVE State: PUBLISHED
Explain CVE-2000-1228
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables.
Affected Products: n/a
References: [{'name': '2271', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2271'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1229
Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function, which causes the file to be displayed in admin.php3.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1230
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHP_AUTH_USER parameter set to "boogieman".
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'name': '2274', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2274'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1231
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1232
upgrade.php3 in Phorum 3.0.7 could allow remote attackers to modify certain Phorum database tables via an unknown method.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1233
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter.
Affected Products: n/a
References: [{'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1234
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters.
Affected Products: n/a
References: [{'name': '2272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2272'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm'}, {'name': '20000106 Phorum 3.0.7 exploits and IDS signatures', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hispahack.ccc.de/mi020.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1235
The default configurations of (1) the port listener and (2) modplsql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allow remote attackers to view privileged database information via HTTP requests for Database Access Descriptor (DAD) files.
Affected Products: n/a
References: [{'name': '20001219 Oracle WebDb engine brain-damagse', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html'}, {'name': '20010110 Patch for Potential Vulnerability in Oracle Internet Application Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/155881'}, {'name': 'oracle-webdb-admin-access(5818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/5818.php'}, {'name': '20001221 Re: Oracle WebDb engine brain-damagse', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html'}, {'name': '2150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2150'}, {'name': '20001223 Potential Vulnerabilities in Oracle Internet Application Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1236
SQL injection vulnerability in mod_sql in Oracle Internet Application Server (IAS) 3.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the query string of the URL.
Affected Products: n/a
References: [{'name': '20001219 Oracle WebDb engine brain-damagse', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0339.html'}, {'name': '20010110 Patch for Potential Vulnerability in Oracle Internet Application Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/155881'}, {'name': 'oracle-execute-plsql(5817)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/5817.php'}, {'name': '20001221 Re: Oracle WebDb engine brain-damagse', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0372.html'}, {'name': '2150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2150'}, {'name': '20001223 Potential Vulnerabilities in Oracle Internet Application Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0463.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1237
The POP3 server in FTGate returns an -ERR code after receiving an invalid USER request, which makes it easier for remote attackers to determine valid usernames and conduct brute force password guessing.
Affected Products: n/a
References: [{'name': '20000626 Problems with FTGate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-06/0282.html'}, {'name': 'ftgate-invalid-user-requests(4793)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/4793.php'}]
CVE State: PUBLISHED
Explain CVE-2000-1238
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / (forward slash) characters before the restricted pages.
Affected Products: n/a
References: [{'name': 'weblogic-bypass-auth(5588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5588'}, {'name': '5089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5089'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftpna.bea.com/pub/releases/patches/SecurityBEA00-0600.zip'}]
CVE State: PUBLISHED
Explain CVE-2000-1239
The HTTP interface of Tivoli Lightweight Client Framework (LCF) in IBM Tivoli Management Framework 3.7.1 sets http_disable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log files.
Affected Products: n/a
References: [{'name': 'tivoli-lcf-file-read(3927)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/3927'}, {'name': '17085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17085'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21082896'}]
CVE State: PUBLISHED
Explain CVE-2000-1240
Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Affected Products: n/a
References: [{'name': 'anyportalphp-siteman-information-disclosure(25441)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25441'}, {'name': '23983', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23983'}]
CVE State: PUBLISHED
Explain CVE-2000-1241
Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=25971'}]
CVE State: PUBLISHED
Explain CVE-2000-1242
The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.php'}, {'name': '30768', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/30768'}]
CVE State: PUBLISHED
Explain CVE-2000-1243
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
Affected Products: n/a
References: [{'name': '20000413 Re: Back Door in Commercial Shopping Cart [Stormer Hosting]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0066.html'}, {'name': '20070603 Dansie Cart Script Exploit Reported', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/470457/100/0/threaded'}, {'name': '20000411 Back Door in Commercial Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0051.html'}, {'name': '20000413 Re: Back Door in Commercial Shopping Cart', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0071.html'}, {'name': '20000413 Re: Back Door in Commercial Shopping Cart [RESOLVED]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-04/0086.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1244
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection.
Affected Products: n/a
References: [{'name': "20001110 CA's InoculateIT Agent for Exchange Server", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-11/0158.html'}]
CVE State: PUBLISHED
Explain CVE-2000-1245
Multiple unspecified vulnerabilities in NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allow remote attackers to bypass intended restrictions on anonymous access via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1'}]
CVE State: PUBLISHED
Explain CVE-2000-1246
NWFTPD.nlm before 5.01o in the FTP server in Novell NetWare 5.1 SP3 allows remote authenticated users to cause a denial of service (abend) by sending an RNTO command after a failed RNFR command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1'}]
CVE State: PUBLISHED
Explain CVE-2000-1247
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI.
Affected Products: n/a
References: [{'name': '8412', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/8412'}, {'name': '[java-apache-users] 20000929 jserv wrapper error', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=java-apache-users&m=97036799917909&w=2'}, {'name': 'apache-jserv-env-information-disclosure(51946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/51946'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://archive.apache.org/dist/java/java.apache.org-www.tar.gz'}]
CVE State: PUBLISHED
Explain CVE-2000-1254
crypto/rsa/rsa_gen.c in OpenSSL before 0.9.6 mishandles C bitwise-shift operations that exceed the size of an expression, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging improper RSA key generation on 64-bit HP-UX platforms.
Affected Products: n/a
References: [{'name': '1035750', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035750'}, {'name': '[openssl-users] 20000529 64 bit problem in RSA_generate_key in 0.9.5a', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://marc.info/?l=openssl-users&m=95961024500509'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-01.ibm.com/support/docview.wss?uid=swg21995039'}, {'name': '90109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90109'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=db82b8f9bd432a59aea8e1014694e15fc457c2bb'}, {'name': '[oss-security] 20160504 broken RSA keys', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/05/04/17'}]
CVE State: PUBLISHED
Explain CVE-2001-0001
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.
Affected Products: n/a
References: [{'name': 'php-nuke-elevate-privileges(6183)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6183'}, {'name': '20010213 RFP2101: RFPlutonium to fuel your PHP-Nuke', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0002
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
Affected Products: n/a
References: [{'name': 'oval:org.mitre.oval:def:920', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A920'}, {'name': '7823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7823'}, {'name': 'MS01-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015'}, {'name': 'ie-chm-execute-files(5567)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5567'}, {'name': '2456', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2456'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/chmtempmain.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0003
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
Affected Products: n/a
References: [{'name': 'wec-ntlm-authentication(5920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5920'}, {'name': 'MS01-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001'}, {'name': '2199', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2199'}]
CVE State: PUBLISHED
Explain CVE-2001-0004
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.
Affected Products: n/a
References: [{'name': '2313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2313'}, {'name': 'iis-read-files(5903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5903'}, {'name': 'MS01-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004'}, {'name': '20010108 IIS 5.0 allows viewing files using %3F+.htr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=97897954625305&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0005
Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
Affected Products: n/a
References: [{'name': 'A012301-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a012301-1.txt'}, {'name': 'powerpoint-execute-code(5996)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5996'}, {'name': 'MS01-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-002'}]
CVE State: PUBLISHED
Explain CVE-2001-0006
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.
Affected Products: n/a
References: [{'name': '20010126 ntsecurity.nu advisory: Winsock Mutex Vulnerability in Windows NT 4.0 SP6 and below', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=98075221915234&w=2'}, {'name': 'MS01-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003'}, {'name': 'winnt-mutex-dos(6006)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6006'}]
CVE State: PUBLISHED
Explain CVE-2001-0007
Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.
Affected Products: n/a
References: [{'name': '2176', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2176'}, {'name': 'netscreen-webui-bo(5908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5908'}, {'name': '1707', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1707'}, {'name': '20010109 NSFOCUS SA2001-01: NetScreen Firewall WebUI Buffer Overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/155149'}]
CVE State: PUBLISHED
Explain CVE-2001-0008
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
Affected Products: n/a
References: [{'name': 'interbase-backdoor-account(5911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5911'}, {'name': '2192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2192'}, {'name': 'CA-2001-01', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-01.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0009
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.
Affected Products: n/a
References: [{'name': '1703', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1703'}, {'name': 'lotus-domino-directory-traversal(5899)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5899'}, {'name': '20010109 bugtraq id 2173 Lotus Domino Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/155124'}, {'name': '20010105 Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/154537'}, {'name': '2173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2173'}]
CVE State: PUBLISHED
Explain CVE-2001-0010
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
Affected Products: n/a
References: [{'name': '2302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2302'}, {'name': 'RHSA-2001:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-007.html'}, {'name': 'DSA-026', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-026'}, {'name': '20010129 Vulnerabilities in BIND 4 and 8', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/047.asp'}, {'name': 'CA-2001-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-02.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0011
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Affected Products: n/a
References: [{'name': 'RHSA-2001:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-007.html'}, {'name': '20010129 Vulnerabilities in BIND 4 and 8', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/047.asp'}, {'name': '2307', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2307'}, {'name': 'CA-2001-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-02.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0012
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
Affected Products: n/a
References: [{'name': 'RHSA-2001:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-007.html'}, {'name': 'DSA-026', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-026'}, {'name': '20010129 Vulnerabilities in BIND 4 and 8', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/047.asp'}, {'name': 'CA-2001-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-02.html'}, {'name': '2321', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2321'}]
CVE State: PUBLISHED
Explain CVE-2001-0013
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Affected Products: n/a
References: [{'name': 'RHSA-2001:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-007.html'}, {'name': '20010129 Vulnerabilities in BIND 4 and 8', 'tags': ['vendor-advisory', 'x_refsource_NAI'], 'url': 'http://www.nai.com/research/covert/advisories/047.asp'}, {'name': '2309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2309'}, {'name': 'CA-2001-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-02.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0014
Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability.
Affected Products: n/a
References: [{'name': 'MS01-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-006'}, {'name': '2326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2326'}]
CVE State: PUBLISHED
Explain CVE-2001-0015
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.
Affected Products: n/a
References: [{'name': 'win-dde-elevate-privileges(6062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6062'}, {'name': '2341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2341'}, {'name': 'A020501-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a020501-1.txt'}, {'name': 'MS01-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-007'}]
CVE State: PUBLISHED
Explain CVE-2001-0016
NTLM Security Support Provider (NTLMSSP) service does not properly check the function number in an LPC request, which could allow local users to gain administrator level access.
Affected Products: n/a
References: [{'name': 'MS01-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-008'}, {'name': "20010207 Local promotion vulnerability in NT4's NTLM Security Support Provider", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_NTLMSSP.html'}, {'name': '2348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2348'}, {'name': 'ntlm-ssp-elevate-privileges(6076)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6076'}]
CVE State: PUBLISHED
Explain CVE-2001-0017
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability.
Affected Products: n/a
References: [{'name': '2368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2368'}, {'name': 'winnt-pptp-dos(6103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6103'}, {'name': 'MS01-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-009'}]
CVE State: PUBLISHED
Explain CVE-2001-0018
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.
Affected Products: n/a
References: [{'name': 'win2k-domain-controller-dos(6136)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6136'}, {'name': '20001202 UDP Ping-pong in Win2k', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/148411'}, {'name': 'L-049', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-049.shtml'}, {'name': 'MS01-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-011'}]
CVE State: PUBLISHED
Explain CVE-2001-0019
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.
Affected Products: n/a
References: [{'name': '20010131 Cisco Content Services Switch Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml'}, {'name': 'A013101-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a013101-1.txt'}]
CVE State: PUBLISHED
Explain CVE-2001-0020
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.
Affected Products: n/a
References: [{'name': '20010131 Cisco Content Services Switch Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml'}, {'name': 'A013101-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2001/a013101-1.txt'}, {'name': 'cisco-ccs-file-access(6031)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6031'}, {'name': '2331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2331'}, {'name': '1757', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1757'}]
CVE State: PUBLISHED
Explain CVE-2001-0021
MailMan Webmail 3.0.25 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the alternate_template parameter.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.endymion.com/products/mailman/history.htm'}, {'name': '2063', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2063'}, {'name': '20001206 (SRADV00005) Remote command execution vulnerabilities in MailMan Webmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0057.html'}, {'name': 'mailman-alternate-templates(5649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5649'}]
CVE State: PUBLISHED
Explain CVE-2001-0022
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.
Affected Products: n/a
References: [{'name': '2106', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2106'}, {'name': '20001213 Re: Insecure input validation in simplestmail.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html'}, {'name': 'http-cgi-simplestguest(5743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5743'}]
CVE State: PUBLISHED
Explain CVE-2001-0023
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
Affected Products: n/a
References: [{'name': '20001211 Insecure input validation in everythingform.cgi (remote command execution)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html'}, {'name': '2101', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2101'}, {'name': 'http-cgi-everythingform(5736)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5736'}]
CVE State: PUBLISHED
Explain CVE-2001-0024
simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.
Affected Products: n/a
References: [{'name': '2102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2102'}, {'name': 'http-cgi-simplestmail(5739)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5739'}, {'name': '20001211 Insecure input validation in simplestmail.cgi (remote command execution)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0136.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0025
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
Affected Products: n/a
References: [{'name': '20001211 Insecure input validation in ad.cgi', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0143.html'}, {'name': '2103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2103'}, {'name': 'http-cgi-ad(5741)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5741'}]
CVE State: PUBLISHED
Explain CVE-2001-0026
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.
Affected Products: n/a
References: [{'name': 'CLA-2000:357', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357'}, {'name': 'MDKSA-2000:084', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3'}, {'name': 'RHSA-2000:130', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2000-130.html'}, {'name': '20001211 DoS vulnerability in rp-pppoe versions <= 2.4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html'}, {'name': '2098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2098'}, {'name': 'rppppoe-zero-length-dos(5727)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5727'}]
CVE State: PUBLISHED
Explain CVE-2001-0027
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.
Affected Products: n/a
References: [{'name': '20001211 mod_sqlpw Password Caching Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html'}, {'name': 'proftpd-modsqlpw-unauth-access(5737)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5737'}]
CVE State: PUBLISHED
Explain CVE-2001-0028
Buffer overflow in the HTML parsing code in oops WWW proxy server 1.5.2 and earlier allows remote attackers to execute arbitrary commands via a large number of " (quotation) characters.
Affected Products: n/a
References: [{'name': '2099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2099'}, {'name': 'FreeBSD-SA-00:79', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://archives.neohapsis.com/archives/freebsd/2000-12/0418.html'}, {'name': '20001211 [pkc] remote heap buffer overflow in oops', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0127.html'}, {'name': 'oops-ftputils-bo(5725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5725'}]
CVE State: PUBLISHED
Explain CVE-2001-0029
Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.
Affected Products: n/a
References: [{'name': '2099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2099'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zipper.paco.net/~igor/oops/ChangeLog'}, {'name': 'oops-dns-bo(6122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6122'}, {'name': '20001212 Stack too ;) Re: [pkc] remote heap buffer overflow in oops', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0158.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0030
FoolProof 3.9 allows local users to bypass program execution restrictions by downloading the restricted executables from another source and renaming them.
Affected Products: n/a
References: [{'name': 'foolproof-security-bypass(5758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5758'}, {'name': '2089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2089'}]
CVE State: PUBLISHED
Explain CVE-2001-0031
BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist.
Affected Products: n/a
References: [{'name': 'broadvision-bv1to1-reveal-path(5661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5661'}, {'name': '20001207 BroadVision One-To-One Enterprise Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0074.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0032
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL.
Affected Products: n/a
References: [{'name': 'ssldump-format-strings(5717)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5717'}, {'name': '2096', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2096'}, {'name': '20001208 format string in ssl dump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/149917'}]
CVE State: PUBLISHED
Explain CVE-2001-0033
KTH Kerberos IV allows local users to change the configuration of a Kerberos server running at an elevated privilege by specifying an alternate directory using with the KRBCONFDIR environmental variable, which allows the user to gain additional privileges.
Affected Products: n/a
References: [{'name': '20001208 Vulnerabilities in KTH Kerberos IV', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html'}, {'name': 'kerberos4-user-config(5738)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5738'}, {'name': '20001210 KTH upgrade and FIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.
Affected Products: n/a
References: [{'name': 'kerberos4-arbitrary-proxy(5733)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5733'}, {'name': '20001208 Vulnerabilities in KTH Kerberos IV', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html'}, {'name': '20001210 KTH upgrade and FIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0035
Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request.
Affected Products: n/a
References: [{'name': '20001208 Vulnerabilities in KTH Kerberos IV', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html'}, {'name': 'kerberos4-auth-packet-overflow(5734)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5734'}, {'name': '20010130 Buffer overflow in old ssh-1.2.2x-afs-kerberosv4 patches', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html'}, {'name': '20001210 KTH upgrade and FIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.
Affected Products: n/a
References: [{'name': 'RHSA-2001:025', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-025.html'}, {'name': '20001208 Vulnerabilities in KTH Kerberos IV', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html'}, {'name': 'kerberos4-tmpfile-dos(5754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5754'}, {'name': '20001210 KTH upgrade and FIX', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0037
Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers.
Affected Products: n/a
References: [{'name': '20001207 HomeSeer Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0082.html'}, {'name': 'homeseer-directory-traversal(5663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5663'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.keware.com/hsbetachanges.htm'}, {'name': '2085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2085'}]
CVE State: PUBLISHED
Explain CVE-2001-0038
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.
Affected Products: n/a
References: [{'name': '2084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2084'}, {'name': 'offline-explorer-reveal-files(5728)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5728'}, {'name': '20001207 MetaProducts Offline Explorer', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2000-12/0078.html'}]
CVE State: PUBLISHED