Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2001-0931
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
Affected Products: n/a
References: [{'name': 'powerftp-dot-directory-traversal(7615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7615'}, {'name': '3593', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3593'}, {'name': '20011128 PowerFTP-server-Bugs&Exploits-Remotes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100698397818175&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0932
Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command.
Affected Products: n/a
References: [{'name': '3595', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3595'}, {'name': '20011128 PowerFTP-server-Bugs&Exploits-Remotes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100698397818175&w=2'}, {'name': 'powerftp-long-command-dos(7616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7616'}]
CVE State: PUBLISHED
Explain CVE-2001-0933
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
Affected Products: n/a
References: [{'name': '20011128 PowerFTP-server-Bugs&Exploits-Remotes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100698397818175&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0934
Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.
Affected Products: n/a
References: [{'name': '20011128 PowerFTP-server-Bugs&Exploits-Remotes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100698397818175&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0935
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.
Affected Products: n/a
References: [{'name': 'SuSE-SA:2001:043', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0936
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://frox.sourceforge.net/security.txt'}, {'name': 'frox-ftp-proxy-bo(7632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7632'}, {'name': '20011130 Alert: Vulnerability in frox transparent ftp proxy.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100713367307799&w=2'}, {'name': '3606', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3606'}]
CVE State: PUBLISHED
Explain CVE-2001-0937
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.
Affected Products: n/a
References: [{'name': '20011129 PGPMail.pl possible remote command execution', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://www.securityfocus.com/archive/82/243262'}, {'name': '20011130 Vulnerabilities in PGPMail.pl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100714269114686&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0938
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
Affected Products: n/a
References: [{'name': '20011130 Aspupload installs exploitable scripts', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100715294425985&w=2'}, {'name': 'aspupload-upload-directory-traversal(7628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7628.php'}, {'name': 'aspupload-directory-browsing-download(7629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7629.php'}, {'name': '3608', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3608'}]
CVE State: PUBLISHED
Explain CVE-2001-0939
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
Affected Products: n/a
References: [{'name': '3607', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3607'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88'}, {'name': '1998', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1998'}, {'name': 'lotus-domino-nhttp-dos(7631)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7631'}, {'name': '20011130 Denial of Service in Lotus Domino 5.08 and earlier HTTP Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100715316426817&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0940
Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.
Affected Products: n/a
References: [{'name': '1951', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1951'}, {'name': '20010919 GUI Buffer Overflow', 'tags': ['vendor-advisory', 'x_refsource_CHECKPOINT'], 'url': 'http://www.checkpoint.com/techsupport/alerts/buffer_overflow.html'}, {'name': '20010919 Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100094268017271&w=2'}, {'name': '3336', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3336'}, {'name': 'fw1-log-viewer-bo(7145)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7145'}, {'name': '20011130 Fw: Firewall-1 remote SYSTEM shell buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html'}, {'name': '20010921 Check Point FireWall-1 GUI Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_WIN2KSEC'], 'url': 'http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html'}, {'name': '20011128 Firewall-1 remote SYSTEM shell buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100698954308436&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
Affected Products: n/a
References: [{'name': '3138', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3138'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf'}, {'name': '20011130 ASI Oracle Security Alert: Oracle Home Environment Variable Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100716693806967&w=2'}, {'name': 'oracle-dbsnmp-home-bo(7643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7643'}]
CVE State: PUBLISHED
Explain CVE-2001-0942
dbsnmp in Oracle 8.1.6 and 8.1.7 uses the ORACLE_HOME environment variable to find and execute the dbsnmp program, which allows local users to execute arbitrary programs by pointing the ORACLE_HOME to an alternate directory that contains a malicious version of dbsnmp.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf'}, {'name': '20011130 ASI Oracle Security Alert: Oracle Home Environment Variable Validation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2001/Dec/0000.html'}, {'name': 'oracle-dbsnmp-home-validation(7645)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7645'}, {'name': '3137', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3137'}]
CVE State: PUBLISHED
Explain CVE-2001-0943
dbsnmp in Oracle 8.0.5 and 8.1.5, under certain conditions, trusts the PATH environment variable to find and execute the (1) chown or (2) chgrp commands, which allows local users to execute arbitrary code by modifying the PATH to point to Trojan Horse programs.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf'}, {'name': '3129', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3129'}, {'name': '20011130 ASI Oracle Security Alert: CHOWN Path Environment Variable Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/lists/bugtraq/2001/Dec/0001.html'}, {'name': '20010801 Oracle 8.1.5 dbnsmp vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/201020'}]
CVE State: PUBLISHED
Explain CVE-2001-0944
DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.
Affected Products: n/a
References: [{'name': '20011202 mIRC bug?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100734173831990&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0945
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
Affected Products: n/a
References: [{'name': 'macos-outlook-long-message-bo(7648)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7648.php'}, {'name': '20011203 Buffer over flow on Outlook express for Macintosh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100741295502017&w=2'}, {'name': '3611', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3611'}]
CVE State: PUBLISHED
Explain CVE-2001-0946
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
Affected Products: n/a
References: [{'name': 'apmd-apmscript-symlink(8268)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8268'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389'}, {'name': '20011204 Symlink attack with apmd of RH 7.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100743394701962&w=2'}, {'name': '5493', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5493'}]
CVE State: PUBLISHED
Explain CVE-2001-0947
Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.
Affected Products: n/a
References: [{'name': 'eva-forms-reveal-path(7649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7649'}, {'name': '20011204 NMRC Advisory - Multiple Valicert Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100749428517090&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.valicert.com/support/security_advisory_eva.html'}, {'name': '3615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3615'}]
CVE State: PUBLISHED
Explain CVE-2001-0948
Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.
Affected Products: n/a
References: [{'name': '20011204 NMRC Advisory - Multiple Valicert Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100749428517090&w=2'}, {'name': 'eva-admin-script-injection(7650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.valicert.com/support/security_advisory_eva.html'}, {'name': '3619', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3619'}]
CVE State: PUBLISHED
Explain CVE-2001-0949
Buffer overflows in forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 allows remote attackers to execute arbitrary code via long arguments to the parameters (1) Mode, (2) Certificate_File, (3) useExpiredCRLs, (4) listenLength, (5) maxThread, (6) maxConnPerSite, (7) maxMsgLen, (8) exitTime, (9) blockTime, (10) nextUpdatePeriod, (11) buildLocal, (12) maxOCSPValidityPeriod, (13) extension, and (14) a particular combination of parameters associated with private key generation that form a string of a certain length.
Affected Products: n/a
References: [{'name': '3634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3634'}, {'name': '3631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3631'}, {'name': '3635', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3635'}, {'name': '3628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3628'}, {'name': '3625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3625'}, {'name': '3636', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3636'}, {'name': '20011204 NMRC Advisory - Multiple Valicert Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100749428517090&w=2'}, {'name': '3633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3633'}, {'name': '3630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3630'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.valicert.com/support/security_advisory_eva.html'}, {'name': '3629', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3629'}, {'name': '3621', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3621'}, {'name': '3622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3622'}, {'name': '3627', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3627'}, {'name': '3632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3632'}, {'name': '3624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3624'}, {'name': 'eva-forms-bo(7652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7652'}]
CVE State: PUBLISHED
Explain CVE-2001-0950
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.
Affected Products: n/a
References: [{'name': 'eva-insecure-key-storage(7651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7651'}, {'name': '3620', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3620'}, {'name': '20011204 NMRC Advisory - Multiple Valicert Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100749428517090&w=2'}, {'name': 'eva-insecure-key-generation(7653)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7653'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.valicert.com/support/security_advisory_eva.html'}, {'name': '3618', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3618'}]
CVE State: PUBLISHED
Explain CVE-2001-0951
Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
Affected Products: n/a
References: [{'name': 'win2k-ike-dos(7667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7667'}, {'name': '20011207 UDP DoS attack in Win2k via IKE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100774842520403&w=2'}, {'name': '20011211 UDP DoS attack in Win2k via IKE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100813081913496&w=2'}, {'name': '3652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3652'}]
CVE State: PUBLISHED
Explain CVE-2001-0952
THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.
Affected Products: n/a
References: [{'name': '20011207 Red Faction Server/Client DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100774266027774&w=2'}, {'name': '3651', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3651'}, {'name': 'red-faction-udp-dos(7672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7672'}]
CVE State: PUBLISHED
Explain CVE-2001-0953
Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.
Affected Products: n/a
References: [{'name': '3655', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3655'}, {'name': '20011208 kebi-Webmail Solution vulnerability (Tested)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100780264902037&w=2:1'}, {'name': 'kebi-webmail-admin-dir-access(7674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7674'}]
CVE State: PUBLISHED
Explain CVE-2001-0954
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
Affected Products: n/a
References: [{'name': 'lotus-domino-database-dos(7684)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7684'}, {'name': '20011207 Lotus Domino Web server vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100780146532131&w=2L:1'}, {'name': '3656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3656'}, {'name': '2000', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2000'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=255CC03D83CFF50C85256B1E005E349B'}]
CVE State: PUBLISHED
Explain CVE-2001-0955
Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.
Affected Products: n/a
References: [{'name': '3663', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3663'}, {'name': '3657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3657'}, {'name': '20011207 Crashing X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100776624224549&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xfree86.org/4.2.0/RELNOTES2.html#2'}, {'name': '20011208 Re: Crashing X', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=100784290015880&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xfree86.org/security/'}, {'name': 'xfree86-xterm-title-bo(7683)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7683'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c'}, {'name': 'xfree86-konqueror-bo(7673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7673'}, {'name': '20010922 XFree86 DOS / Buffer overflow local and remote.', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=100118958310463&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0956
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
Affected Products: n/a
References: [{'name': '20010911 security alert: speechd from speechio.org', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0089.html'}, {'name': '3326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.speechio.org/speechd.html'}, {'name': 'speechd-execute-commands(7121)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7121'}]
CVE State: PUBLISHED
Explain CVE-2001-0958
Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll.
Affected Products: n/a
References: [{'name': 'interscan-emanager-bo(7104)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7104'}, {'name': '20010912 [SNS Advisory No.42] Trend Micro InterScan eManager for NT Multiple Program Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html'}, {'name': '3327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3327'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142'}]
CVE State: PUBLISHED
Explain CVE-2001-0959
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 creates a hidden share named ARCSERVE$, which allows remote attackers to obtain sensitive information and overwrite critical files.
Affected Products: n/a
References: [{'name': '20010915 ARCserve 6.61 Share Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html'}, {'name': '5483', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5483'}, {'name': 'arcserve-aremote-plaintext(7122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7122'}, {'name': '3342', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3342'}, {'tags': ['x_refsource_MISC'], 'url': 'http://support.ca.com/Download/patches/asitnt/QO00945.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0960
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges.
Affected Products: n/a
References: [{'name': '20010915 ARCserve 6.61 Share Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html'}, {'name': 'arcserve-aremote-plaintext(7122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7122'}, {'tags': ['x_refsource_MISC'], 'url': 'http://support.ca.com/Download/patches/asitnt/QO00945.html'}, {'name': '3343', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3343'}]
CVE State: PUBLISHED
Explain CVE-2001-0961
Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.
Affected Products: n/a
References: [{'name': 'DSA-076', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-076'}, {'name': 'most-file-create-bo(7149)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7149'}, {'name': '3347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3347'}]
CVE State: PUBLISHED
Explain CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
Affected Products: n/a
References: [{'name': '20010928 Re: Websphere cookie/sessionid predictable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html'}, {'name': '20010919 Websphere cookie/sessionid predictable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html'}, {'name': 'ibm-websphere-seq-predict(7153)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7153'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p'}, {'name': '5492', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5492'}]
CVE State: PUBLISHED
Explain CVE-2001-0963
Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pi-soft.com/spoonftp/index.shtml'}, {'name': 'spoonftp-dot-directory-traversal(7147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7147'}, {'name': '1953', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1953'}, {'name': '3351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3351'}, {'name': '20010920 Vulnerability in SpoonFTP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0171.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0964
Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.
Affected Products: n/a
References: [{'name': 'halflife-connect-bo(7148)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7148'}, {'name': '20010920 Advisory: Half-Life remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0965
glFTPD 1.23 allows remote attackers to cause a denial of service (CPU consumption) via a LIST command with an argument that contains a large number of * (asterisk) characters.
Affected Products: n/a
References: [{'name': '3201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3201'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.glftpd.org/'}, {'name': 'glftpd-list-dos(7001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7001.php'}, {'name': '20010817 [ASGUARD-LABS] glFTPD v1.23 DOS Attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0239.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0966
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
Affected Products: n/a
References: [{'name': '20010818 [Real Security] Advisory for Nudester 1.10', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html'}, {'name': '3202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3202'}]
CVE State: PUBLISHED
Explain CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
Affected Products: n/a
References: [{'name': '3204', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3204'}, {'name': '20010817 Arkeia Possible remote root & information leakage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.
Affected Products: n/a
References: [{'name': '20010817 Arkeia Possible remote root & information leakage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html'}, {'name': '3203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3203'}]
CVE State: PUBLISHED
Explain CVE-2001-0969
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
Affected Products: n/a
References: [{'name': '3206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3206'}, {'name': 'FreeBSD-SA-01:53', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc'}, {'name': 'ipfw-me-unauthorized-access(7002)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7002'}, {'name': '1937', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1937'}]
CVE State: PUBLISHED
Explain CVE-2001-0970
Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.
Affected Products: n/a
References: [{'name': '20010820 tdforum 1.2 Messageboard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99832137410609&w=2'}, {'name': '3207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3207'}, {'name': 'VU#782243', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/782243'}, {'name': '20010820 Re: tdforum 1.2 Messageboard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html'}, {'name': 'tdforum-cross-site-scripting(7009)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7009'}]
CVE State: PUBLISHED
Explain CVE-2001-0971
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
Affected Products: n/a
References: [{'name': '3209', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3209'}, {'name': '20010820 ACI 4D WebServer Directory traversal.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/206102'}, {'name': '4d-webserver-directory-traversal(7010)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7010.php'}]
CVE State: PUBLISHED
Explain CVE-2001-0972
Surf-Net ASP Forum before 2.30 uses easily guessable cookies based on the UserID, which allows remote attackers to gain administrative privileges by calculating the value of the admin cookie (UserID 1), i.e. "0888888."
Affected Products: n/a
References: [{'name': '3210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3210'}, {'name': '20010820 security problem in surf-net ASP Discussion Forum < 2.30', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99834088223352&w=2'}, {'name': 'surfnet-asp-cookie-seq-predictable(7011)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7011'}]
CVE State: PUBLISHED
Explain CVE-2001-0973
BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.
Affected Products: n/a
References: [{'name': 'bscw-extracted-file-symlink(7029)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7029.php'}, {'name': '20010822 BSCW symlink vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-08/0328.html'}, {'name': 'VU#465971', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/465971'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bscw.gmd.de/Bulletins/BSCW-SB-2001-08.extract.txt'}, {'name': '3227', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3227'}]
CVE State: PUBLISHED
Explain CVE-2001-0974
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Affected Products: n/a
References: [{'name': 'oracle-ldap-protos-format-string(6903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6903'}, {'name': '3048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3048'}, {'name': 'CA-2001-18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-18.html'}, {'name': 'VU#869184', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/869184'}, {'name': 'L-116', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-116.shtml'}]
CVE State: PUBLISHED
Explain CVE-2001-0975
Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Affected Products: n/a
References: [{'name': 'CA-2001-18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-18.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/oid_cert_bof.pdf'}, {'name': 'VU#869184', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/869184'}, {'name': '3047', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3047'}, {'name': 'L-116', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/l-116.shtml'}, {'name': 'oracle-ldap-protos-bo(6902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6902'}]
CVE State: PUBLISHED
Explain CVE-2001-0976
Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables.
Affected Products: n/a
References: [{'name': 'HPSBUX0108-165', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q3/0048.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0977
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
Affected Products: n/a
References: [{'name': 'CA-2001-18', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2001-18.html'}, {'name': '1905', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1905'}, {'name': 'RHSA-2001:098', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-098.html'}, {'name': 'DSA-068', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2001/dsa-068'}, {'name': 'MDKSA-2001:069', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-069.php3'}, {'name': 'VU#935800', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/935800'}, {'name': '3049', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3049'}, {'name': 'CLA-2001:417', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417'}, {'name': 'openldap-ldap-protos-dos(6904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6904'}]
CVE State: PUBLISHED
Explain CVE-2001-0978
login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program.
Affected Products: n/a
References: [{'name': 'hpux-login-btmp(8632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8632.php'}, {'name': 'PHCO_17719', 'tags': ['issue-tracking', 'x_refsource_HPBUG'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q3/0052.html'}, {'name': '3289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3289'}]
CVE State: PUBLISHED
Explain CVE-2001-0979
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
Affected Products: n/a
References: [{'name': 'hpux-swverify-bo(7078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7078'}, {'name': '20010903 hpux warez', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/211687'}, {'name': '3279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3279'}]
CVE State: PUBLISHED
Explain CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
Affected Products: n/a
References: [{'name': 'docview-httpd-command-execution(6854)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6854'}, {'name': 'CSSA-2001-026.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txt'}, {'name': '3052', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3052'}]
CVE State: PUBLISHED
Explain CVE-2001-0981
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
Affected Products: n/a
References: [{'name': 'hp-cifs-change-passwords(7051)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7051'}, {'name': 'HPSBUX0108-164', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2001-q3/0048.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
Affected Products: n/a
References: [{'name': '20010723 iXsecurity.20010618.policy_director.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html'}, {'name': 'IY18152', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README'}, {'name': '3080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3080'}, {'name': 'tivoli-secureway-dot-directory-traversal(6884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6884'}, {'name': '1908', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1908'}]
CVE State: PUBLISHED
Explain CVE-2001-0983
UltraEdit uses weak encryption to record FTP passwords in the uedit32.ini file, which allows local users who can read the file to decrypt the passwords and gain privileges.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://www.eve-software.com/security/ueditpw.html'}, {'name': '20010823 Re: Respondus v1.1.2 stores passwords using weak encryption', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99861651923668&w=2'}]
CVE State: PUBLISHED
Explain CVE-2001-0984
Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.
Affected Products: n/a
References: [{'name': 'counterpane-password-access(7123)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7123'}, {'name': '3337', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3337'}, {'name': "20010913 leak of information in counterpane/Bruce Schneier's Password Safe program", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/213931'}]
CVE State: PUBLISHED
Explain CVE-2001-0985
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
Affected Products: n/a
References: [{'name': '3308', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3308'}, {'name': '20010908 Shopping Cart Version 1.23', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/212827'}, {'name': 'hassan-cart-command-execution(7106)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7106'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.irata.com/shopver.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0986
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
Affected Products: n/a
References: [{'name': '3339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3339'}, {'name': '20010914 Security Vulnerability with Microsoft Index Server 2.0(Sample file reveals file info, physical path etc)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/214217'}, {'name': 'winnt-indexserver-sqlqhit-asp(7125)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7125'}]
CVE State: PUBLISHED
Explain CVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://cgiwrap.sourceforge.net/changes.html'}, {'name': '20010722 Re: [cgiwrap-users] Re: Security hole in CGIWrap (cross-site scripting vulnerability)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html'}, {'name': '1909', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/1909'}, {'name': 'cgiwrap-cross-site-scripting(6886)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6886'}, {'name': '3084', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3084'}]
CVE State: PUBLISHED
Explain CVE-2001-0988
Arkeia backup server 4.2.8-2 and earlier creates its database files with world-writable permissions, which could allow local users to overwrite the files or obtain sensitive information.
Affected Products: n/a
References: [{'name': '3085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3085'}, {'name': 'arkeia-insecure-file-permissions(6885)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6885'}, {'name': '20010723 permission probs with Arkeia', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html'}]
CVE State: PUBLISHED
Explain CVE-2001-0989
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz'}, {'name': '20010723 pileup 1.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html'}, {'name': '3086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3086'}]
CVE State: PUBLISHED