DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0249
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, irix, solaris
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://www.cert.org/advisories/CA-2001-07.html, http://www.nai.com/research/covert/advisories/048.asp, http://www.securityfocus.com/bid/2550
CWE: CWE-131
CVE-2001-0874
Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.ciac.org/ciac/bulletins/m-027.shtml, http://www.securityfocus.com/bid/3693, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
CVE-2001-0106
Vulnerability in inetd server in HP-UX 11.04 and earlier allows attackers to cause a denial of service when the "swait" state is used by a server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q1/0009.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5904, http://archives.neohapsis.com/archives/hp/2001-q1/0009.html
CVE-2001-1454
Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://dev.mysql.com/doc/mysql/en/news-3-23-33.html, http://www.kb.cert.org/vuls/id/367320, http://www.securityfocus.com/archive/1/161917
CVE-2001-0487
AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix_snmp
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY17630&apar=only, http://www.iss.net/security_center/static/6996.php, http://www.osvdb.org/5611
CVE-2001-1322
xinetd 2.1.8 and earlier runs with a default umask of 0, which could allow local users to read or modify files that are created by an application that runs under xinetd but does not set its own safe umask.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: xinetd
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000404, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-024-01, http://www.debian.org/security/2001/dsa-063
CVE-2001-0293
Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftpxq
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html, http://www.securityfocus.com/bid/2426, http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html
CVE-2001-0897
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) before 5.47e allows remote attackers to steal user cookies via an [IMG] tag that references an about: URL with an onerror field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ultimate_bulletin_board
References: http://marc.info/?l=bugtraq&m=100586033530341&w=2, http://marc.info/?l=bugtraq&m=100586541317940&w=2, http://marc.info/?l=bugtraq&m=100586033530341&w=2
CVE-2001-0092
A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.osvdb.org/7817, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093, https://exchange.xforce.ibmcloud.com/vulnerabilities/6086
CVE-2001-0345
Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/2843, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031, https://exchange.xforce.ibmcloud.com/vulnerabilities/6667
CVE-2001-0905
Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: procmail
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:60.procmail.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000433, http://www.debian.org/security/2001/dsa-083
CVE-2001-0335
FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: http://www.securityfocus.com/bid/2719, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026, https://exchange.xforce.ibmcloud.com/vulnerabilities/6545
CVE-2001-0636
Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2.0 and 2.0.1.  NOTE: It is highly likely that this candidate will be split into multiple candidates.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: silentrunner
References: http://xforce.iss.net/alerts/advise91.php, http://xforce.iss.net/alerts/advise91.php
CVE-2001-0238
Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_me, windows_98se, windows_98
References: http://www.ciac.org/ciac/bulletins/l-074.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-022, https://exchange.xforce.ibmcloud.com/vulnerabilities/6405
CVE-2001-0252
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: iplanet_enterprise_server
References: http://marc.info/?l=bugtraq&m=98035833331446&w=2, http://www.securityfocus.com/archive/1/157641, http://www.securityfocus.com/bid/2282
CVE-2001-0314
Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aol_server
References: http://marc.info/?l=bugtraq&m=98053366805491&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6009, http://marc.info/?l=bugtraq&m=98053366805491&w=2
CVE-2001-0475
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vbulletin
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0180.html, http://www.securityfocus.com/bid/2474, http://www.vbulletin.com/forum/showthread.php?s=b20af207b5b908ecf7a4ecf56fbe3cd3&threadid=10839
CVE-2001-0940
Buffer overflow in the GUI authentication code of Check Point VPN-1/FireWall-1 Management Server 4.0 and 4.1 allows remote attackers to execute arbitrary code via a long user name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/win2ksecadvice/2001-q3/0151.html, http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00291.html, http://marc.info/?l=bugtraq&m=100094268017271&w=2
CVE-2001-1561
Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, xvt
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0024.html, http://www.debian.org/security/2001/dsa-082, http://www.iss.net/security_center/static/6781.php
CVE-2001-1290
admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the table_width parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: active_classifieds
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0386.html, http://www.osvdb.org/12326, http://www.securityfocus.com/bid/2942
CVE-2001-0474
Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mesa, mandrake_linux
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-029.php3, https://exchange.xforce.ibmcloud.com/vulnerabilities/6231, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-029.php3
CVE-2001-1353
ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:N
Affected Products: ghostscript
References: http://archives.neohapsis.com/archives/hp/2001-q4/0069.html, http://marc.info/?l=lprng&m=100083210910857&w=2, http://rhn.redhat.com/errata/RHSA-2001-112.html
CVE-2001-1496
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thttpd
Related CWEs: CWE-193
References: http://www.securityfocus.com/archive/1/241310, http://www.securityfocus.com/archive/1/241953, http://www.securityfocus.com/bid/3562
CWE: CWE-193
CVE-2001-0066
Secure Locate (slocate) allows local users to corrupt memory via a malformed database file that specifies an offset value that accesses memory outside of the intended buffer.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_locate
References: http://archives.neohapsis.com/archives/bugtraq/2000-11/0356.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000369, http://www.debian.org/security/2000/20001217a
CVE-2001-0435
The split key mechanism used by PGP 7.0 allows a key share holder to obtain access to the entire key by setting the "Cache passphrase while logged on" option and capturing the passphrases of other share holders as they authenticate.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pgp
References: http://marc.info/?l=bugtraq&m=98691775527457&w=2, http://marc.info/?l=bugtraq&m=98691775527457&w=2
CVE-2001-1495
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: network_query_tool_phpnuke, network_query_tool
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-10/0179.html, http://www.securityfocus.com/bid/3455, https://exchange.xforce.ibmcloud.com/vulnerabilities/7322
CVE-2001-0102
"Multiple Users" Control Panel in Mac OS 9 allows Normal users to gain Owner privileges by removing the Users & Groups Data File, which effectively removes the Owner password and allows the Normal user to log in as the Owner account without a password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: macos
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5830, http://archives.neohapsis.com/archives/bugtraq/2000-12/0497.html
CVE-2001-0670
Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbsd, openbsd, bsd, freebsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-018.txt.asc, ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.20/CSSA-2001-SCO.20.txt, http://www.cert.org/advisories/CA-2001-30.html
CVE-2001-0627
vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.17/CSSA-2001-SCO.17.txt, http://archives.neohapsis.com/archives/bugtraq/2001-05/0220.html, http://www.kb.cert.org/vuls/id/747736
CVE-2001-0718
Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel, powerpoint
References: http://online.securityfocus.com/archive/1/218802, http://www.cert.org/advisories/CA-2001-28.html, http://www.kb.cert.org/vuls/id/287067
CVE-2001-0903
Linear key exchange process in High-bandwidth Digital Content Protection (HDCP) System allows remote attackers to access data as plaintext, avoid device blacklists, clone devices, and create new device keyvectors by computing and using alternate key combinations for authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: high-bandwidth_digital_content_protection
References: http://marc.info/?l=bugtraq&m=100626641009560&w=2, http://nunce.org/hdcp/hdcp111901.htm, http://www.iss.net/security_center/static/7612.php
CVE-2001-1414
The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activities, possibly when certain BSM audit files are not present under the FTP root.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-40521-1, http://www.securityfocus.com/bid/7396, https://exchange.xforce.ibmcloud.com/vulnerabilities/11841
CVE-2001-0317
Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html, http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt, http://www.redhat.com/support/errata/RHSA-2001-013.html
CVE-2001-0222
webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: webmin
References: http://www.calderasystems.com/support/security/advisories/CSSA-2001-004.0.txt, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-016.php3, https://exchange.xforce.ibmcloud.com/vulnerabilities/6011
CVE-2001-1594
GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics printer FTP service, (4) eNTEGRA for the eNTEGRA P&R user account, (5) insite for the WinVNC Login, and possibly other accounts, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: entegra_p\&r
Related CWEs: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/2263784.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=2263784-100&FILENAME=2263784.pdf&FILEREV=5&DOCREV_ORG=5&SUBMIT=+ACCEPT+, http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/, https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CWE: CWE-255
CVE-2001-0020
Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: arrowpoint, content_services_switch
References: http://www.atstake.com/research/advisories/2001/a013101-1.txt, http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml, http://www.osvdb.org/1757
CVE-2001-0308
UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_http_server
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html, http://www.geocities.com/gzhangx/websrv/docs/security.html, http://www.securityfocus.com/bid/2388
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2001-1170
AmTote International homebet program stores the homebet.log file in the homebet/ virtual directory, which allows remote attackers to steal account and PIN numbers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: homebet
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0235.html, http://www.securityfocus.com/bid/3370, https://exchange.xforce.ibmcloud.com/vulnerabilities/7186
CVE-2001-0912
Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1, https://exchange.xforce.ibmcloud.com/vulnerabilities/7604, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1
CVE-2001-0576
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a  local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0407.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6292
CWE: CWE-119
CVE-2001-1258
Horde Internet Messaging Program (IMP) before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: imp
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410, http://online.securityfocus.com/archive/1/198495, http://online.securityfocus.com/archive/1/198495
CVE-2001-0604
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_r5_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6351, http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE-2001-1276
ispell before 3.1.20 allows local users to overwrite files of other users via a symlink attack on a temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: ispell
References: http://download.immunix.org/ImmunixOS/6.2/updates/IMNX-2001-62-004-01, http://marc.info/?l=bugtraq&m=99317439131174&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-058.php3
CVE-2001-1257
Cross-site scripting vulnerability in Horde Internet Messaging Program (IMP) before 2.2.6 and 1.2.6 allows remote attackers to execute arbitrary Javascript embedded in an email.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imp
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410, http://online.securityfocus.com/archive/1/198495, http://online.securityfocus.com/archive/1/198495
CVE-2001-0595
Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html, http://www.securityfocus.com/bid/2605, https://exchange.xforce.ibmcloud.com/vulnerabilities/6365
CVE-2001-0205
Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aol_server
References: http://marc.info/?l=bugtraq&m=98148759123258&w=2, http://marc.info/?l=bugtraq&m=98168216003867&w=2, http://www.securityfocus.com/bid/2343
CVE-2001-0954
Lotus Domino 5.0.5 and 5.0.8, and possibly other versions, allows remote attackers to cause a denial of service (block access to databases that have not been previously accessed) via a URL that includes the . (dot) directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino
References: http://marc.info/?l=bugtraq&m=100780146532131&w=2L:1, http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=255CC03D83CFF50C85256B1E005E349B, http://www.osvdb.org/2000
CVE-2001-0617
Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: at-ar220e
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6560, http://archives.neohapsis.com/archives/bugtraq/2001-05/0125.html
CVE-2001-0756
CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtualcatalog
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0067.html, http://marc.info/?l=bugtraq&m=99237435902211&w=2, http://archives.neohapsis.com/archives/bugtraq/2001-06/0067.html
CVE-2001-0927
Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libgtop_daemon
References: ftp://ftp.gnome.org/pub/GNOME/stable/sources/libgtop/libgtop-1.0.13.tar.gz, http://marc.info/?l=bugtraq&m=100689302316077&w=2, http://www.debian.org/security/2002/dsa-098
CVE-2001-0325
Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rtp
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0031.html, http://www.securityfocus.com/bid/2342, http://archives.neohapsis.com/archives/bugtraq/2001-02/0031.html
CVE-2001-1455
Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: siteminder
References: http://www.kb.cert.org/vuls/id/837419, http://www.securityfocus.com/bid/6060, https://exchange.xforce.ibmcloud.com/vulnerabilities/10497
CVE-2001-0210
Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: commerce.cgi
References: http://www.securityfocus.com/archive/1/162259, http://www.securityfocus.com/bid/2361, http://www.securityfocus.com/archive/1/162259
CVE-2001-0762
Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: su-wrapper
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0057.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0057.html
CVE-2001-0079
Support Tools Manager (STM) A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the tool_stat.txt log file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: support_tools_manager
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0174.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0174.html
CVE-2001-0434
The LogDataListToFile ActiveX function used in (1) Knowledge Center and (2) Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: presario
References: http://ftp.support.compaq.com/patches/.new/html/SSRT0716-01.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/6355, http://ftp.support.compaq.com/patches/.new/html/SSRT0716-01.shtml
CVE-2001-0504
Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://www.ciac.org/ciac/bulletins/l-107.shtml, http://www.kb.cert.org/vuls/id/435963, http://www.securityfocus.com/bid/2988
CVE-2001-1209
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zml.cgi
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0086.html, http://seclists.org/bugtraq/2001/Dec/0306.html, http://www.iss.net/security_center/static/7751.php
CVE-2001-1357
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmychat
References: http://www.phpheaven.net/projects/phpMyChat/changes.php3, http://www.phpheaven.net/projects/phpMyChat/changes.php3
CVE-2001-0924
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: informix_web_datablade
References: http://marc.info/?l=bugtraq&m=100654890029878&w=2, http://marc.info/?l=bugtraq&m=100688672019635&w=2, http://www.securityfocus.com/bid/3575
CVE-2001-1296
More.groupware PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: more.groupware
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.iss.net/security_center/static/7215.php, http://www.moregroupware.org/index.php?action=detail&news_id=24
CVE-2001-1139
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: winwrapper_professional
References: http://www.iss.net/security_center/static/7015.php, http://www.securityfocus.com/archive/1/209414, http://www.securityfocus.com/bid/3219
CVE-2001-0428
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via an IP packet with an invalid IP option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vpn_3000_concentrator_series_software
References: http://www.cisco.com/warp/public/707/vpn3k-ipoptions-vuln-pub.shtml, http://www.osvdb.org/1786, http://www.securityfocus.com/bid/2573
CVE-2001-1543
Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 2110_network_camera, neteye_200\+, 2100_network_camera, 2120_network_camera, neteye_200
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0050.html, http://archives.neohapsis.com/archives/bugtraq/2001-12/0061.html, http://www.iss.net/security_center/static/7665.php
CVE-2001-0195
sash before 3.4-4 in Debian GNU/Linux does not properly clone /etc/shadow, which makes it world-readable and could allow local users to gain privileges via password cracking.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux
Related CWEs: CWE-281
References: http://www.debian.org/security/2001/dsa-015, https://exchange.xforce.ibmcloud.com/vulnerabilities/5994, http://www.debian.org/security/2001/dsa-015
CWE: CWE-281
CVE-2001-0329
Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://www.atstake.com/research/advisories/2001/a043001-1.txt, http://www.mozilla.org/projects/bugzilla/security2_12.html, http://www.securityfocus.com/bid/1199
CVE-2001-0938
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: aspupload
References: http://marc.info/?l=bugtraq&m=100715294425985&w=2, http://www.iss.net/security_center/static/7628.php, http://www.iss.net/security_center/static/7629.php
CVE-2001-0217
Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webpals
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html, http://www.securityfocus.com/bid/2372, https://exchange.xforce.ibmcloud.com/vulnerabilities/6102
CVE-2001-0215
ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: roads
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0213.html, http://www.roads.lut.ac.uk/lists/open-roads/2001/02/0001.html, http://www.securityfocus.com/bid/2371
CVE-2001-0549
Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: liveupdate
References: http://www.kb.cert.org/vuls/id/814187, http://www.sarc.com/avcenter/security/Content/2001_07_20.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7013
CVE-2001-0599
Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: adaptive_server_anywhere
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html, http://www.securityfocus.com/bid/2572, https://exchange.xforce.ibmcloud.com/vulnerabilities/6356
CVE-2001-1077
Buffer overflow in tt_printf function of rxvt 2.6.2 allows local users to gain privileges via a long (1) -T or (2) -name argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rxvt
References: http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-028-01, http://www.debian.org/security/2001/dsa-062, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-060.php
CVE-2001-0900
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gallery
References: http://marc.info/?l=bugtraq&m=100619599000590&w=2, http://www.menalto.com/projects/gallery/article.php?sid=33&mode=&order=, http://www.osvdb.org/677
CVE-2001-0612
McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: remote_desktop_32
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0158.html, http://www.osvdb.org/6288, http://www.securityfocus.com/bid/2726
CVE-2001-0687
Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\computername\sharename).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: broker_ftp_server
References: http://www.securityfocus.com/archive/1/190032, http://www.securityfocus.com/bid/2853, https://exchange.xforce.ibmcloud.com/vulnerabilities/6674
CVE-2001-0372
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: akopia_interchange
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0337.html, http://lists.akopia.com/pipermail/interchange-announce/2001/000009.html, http://www.securityfocus.com/bid/2499
CVE-2001-0023
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: everythingform.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html, http://www.securityfocus.com/bid/2101, https://exchange.xforce.ibmcloud.com/vulnerabilities/5736
CVE-2001-1472
SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://www.kb.cert.org/vuls/id/314347, http://www.securityfocus.com/archive/1/201715, http://www.securityfocus.com/bid/3142
CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_directory
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html, http://www.kb.cert.org/vuls/id/610904, https://exchange.xforce.ibmcloud.com/vulnerabilities/5804
CVE-2001-0026
rp-pppoe PPPoE client allows remote attackers to cause a denial of service via the Clamp MSS option and a TCP packet with a zero-length TCP option.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pppoe
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0134.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000357, http://www.linux-mandrake.com/en/security/MDKSA-2000-084.php3
CVE-2001-1374
expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: expect, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060, http://www.redhat.com/support/errata/RHSA-2002-148.html
CVE-2001-0621
The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: content_services_switch_11000
References: http://www.ciac.org/ciac/bulletins/l-085.shtml, http://www.cisco.com/warp/public/707/arrowpoint-ftp-pub.shtml, http://www.osvdb.org/1834
CVE-2001-1028
Buffer overflow in ultimate_source function of man 1.5 and earlier allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.iss.net/security_center/static/8622.php, http://www.redhat.com/support/errata/RHSA-2001-072.html, http://www.iss.net/security_center/static/8622.php
CVE-2001-0910
Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: networker
References: http://marc.info/?l=bugtraq&m=100638782917917&w=2, http://www.securityfocus.com/bid/3564, https://exchange.xforce.ibmcloud.com/vulnerabilities/7601
CVE-2001-1451
Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815, http://www.kb.cert.org/vuls/id/887393, http://www.securityfocus.com/bid/6030
CVE-2001-0082
Check Point VPN-1/FireWall-1 4.1 SP2 with Fastmode enabled allows remote attackers to bypass access restrictions via malformed, fragmented packets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0271.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0271.html
CVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tivoli_secureway_policy_director
References: ftp://ftp.tivoli.com/support/patches/patches_3.7.1/3.7.1-POL-0003/3.7.1-POL-0003.README, http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html, http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only
CVE-2001-0460
Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service (memory exhaustion) via an extremely large HTTP Referrer: header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websweeper
References: http://www.securityfocus.com/archive/1/167406, https://exchange.xforce.ibmcloud.com/vulnerabilities/6214, http://www.securityfocus.com/archive/1/167406
CVE-2001-0046
The default permissions for the SNMP Parameters registry key in Windows NT 4.0 allows remote attackers to read and possibly modify the SNMP community strings to obtain sensitive information or modify network configuration, aka one of the "Registry Permissions" vulnerabilities.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt
References: http://www.securityfocus.com/bid/2066, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095, https://exchange.xforce.ibmcloud.com/vulnerabilities/5672
CVE-2001-0771
Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: spyanywhere
Related CWEs: CWE-264
References: http://www.securityfocus.com/archive/1/186006, http://www.securityfocus.com/bid/2755, https://exchange.xforce.ibmcloud.com/vulnerabilities/6578
CWE: CWE-264
CVE-2001-0581
Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: spynet_chat
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0051.html, http://www.securityfocus.com/bid/2701, https://exchange.xforce.ibmcloud.com/vulnerabilities/6509
CVE-2001-0846
Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: domino
References: http://marc.info/?l=bugtraq&m=100448721830960&w=2, http://www.iss.net/security_center/static/7424.php, http://www.osvdb.org/1979
CVE-2001-1118
A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: roxen_webserver
References: http://download.roxen.com/2.0/patch/security-notice.html, http://www.securityfocus.com/archive/1/201476, http://www.securityfocus.com/archive/1/201499
CVE-2001-0125
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mandrake_linux_corporate_server, debian_linux, exmh, mandrake_linux
References: http://archives.neohapsis.com/archives/freebsd/2001-01/0543.html, http://marc.info/?l=bugtraq&m=97846489313059&w=2, http://marc.info/?l=bugtraq&m=97958594330100&w=2
CVE-2001-0628
Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: word
References: http://support.microsoft.com/support/kb/articles/Q274/2/28.asp, http://www.securityfocus.com/bid/2760, https://exchange.xforce.ibmcloud.com/vulnerabilities/6614
CVE-2001-1103
FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_voyager
References: http://www.kb.cert.org/vuls/id/320944, https://exchange.xforce.ibmcloud.com/vulnerabilities/7119, http://www.kb.cert.org/vuls/id/320944
CVE-2001-0662
RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.ciac.org/ciac/bulletins/l-142.shtml, http://www.securityfocus.com/bid/3313, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-048
CVE-2001-0004
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=97897954625305&w=2, http://www.securityfocus.com/bid/2313, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-004