DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1535
Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: slashcode
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html, http://www.iss.net/security_center/static/7493.php, http://www.securityfocus.com/bid/3519
CVE-2001-0896
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.33/CSSA-2001-SCO.33.txt, http://marc.info/?l=bugtraq&m=101284101228656&w=2, http://marc.info/?l=bugtraq&m=101303877215098&w=2
CVE-2001-0934
Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerftp
References: http://marc.info/?l=bugtraq&m=100698397818175&w=2, http://marc.info/?l=bugtraq&m=100698397818175&w=2
CVE-2001-0939
Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino
References: http://marc.info/?l=bugtraq&m=100715316426817&w=2, http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88, http://www.osvdb.org/1998
CVE-2001-0658
Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isa_server
References: http://www.securityfocus.com/bid/3198, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045, https://exchange.xforce.ibmcloud.com/vulnerabilities/6991
CVE-2001-0996
POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to the end of an email message, which could then be interpreted by various mail clients as valid POP server responses or other input that could cause clients to crash or otherwise behave unexpectedly.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: pop3lite
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0436.html, http://www.securityfocus.com/bid/3278, https://exchange.xforce.ibmcloud.com/vulnerabilities/7075
CVE-2001-0327
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: iplanet_web_server
References: http://www.atstake.com/research/advisories/2001/a041601-1.txt, http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html, http://www.kb.cert.org/vuls/id/276767
CVE-2001-0858
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware, openunix
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.32/, http://marc.info/?l=bugtraq&m=100562386012917&w=2, http://www.iss.net/security_center/static/7570.php
CVE-2001-1435
inetd in Compaq Tru64 UNIX 5.1 allows attackers to cause a denial of service (network connection loss) by causing one of the services handled by inetd to core dump during startup, which causes inetd to stop accepting connections to all of its services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tru64
References: http://www.kb.cert.org/vuls/id/880624, http://www.securityfocus.com/archive/1/165535, http://www.securityfocus.com/archive/1/165535
CVE-2001-0817
Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q4/0047.html, http://www.cert.org/advisories/CA-2001-32.html, http://www.ciac.org/ciac/bulletins/m-021.shtml
CVE-2001-1593
The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: a2ps
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch, http://seclists.org/oss-sec/2014/q1/237, http://seclists.org/oss-sec/2014/q1/253
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-0114
statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: omnihttpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html, http://www.securityfocus.com/bid/2211, http://archives.neohapsis.com/archives/bugtraq/2001-01/0248.html
CVE-2001-0296
Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wftpd_pro
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html
CVE-2001-0180
Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: guestserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6027, http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html
CVE-2001-1056
IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0733.html, http://archives.neohapsis.com/archives/bugtraq/2001-07/0750.html, http://www.iss.net/security_center/static/6923.php
CVE-2001-0775
Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xloadimage, xli
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.debian.org/security/2001/dsa-069, http://www.debian.org/security/2005/dsa-695, http://www.gentoo.org/security/en/glsa/glsa-200503-05.xml
CWE: CWE-119
CVE-2001-0833
Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the "Oracle Trace Collection Security Vulnerability."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: database_server
References: http://marc.info/?l=bugtraq&m=100386756715645&w=2, http://online.securityfocus.com/archive/1/201295, http://online.securityfocus.com/archive/1/222612
CVE-2001-1444
The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kth_kerberos
References: http://josefsson.org/ktelnet/kerberos-telnet.html, http://www.kb.cert.org/vuls/id/774587, https://exchange.xforce.ibmcloud.com/vulnerabilities/10640
CVE-2001-0801
lpstat in IRIX 6.5.13f and earlier allows local users to gain root privileges by specifying a Trojan Horse nettype shared library.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P, http://www.lsd-pl.net/files/get?IRIX/irx_lpstat2, https://exchange.xforce.ibmcloud.com/vulnerabilities/7639
CVE-2001-0530
Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netgap_200, netgap_300
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0256.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0047.html, http://www.securityfocus.com/bid/2798
CVE-2001-1309
Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secureway_directory
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-1036
GNU locate in findutils 4.1 on Slackware 7.1 and 8.0 allows local users to gain privileges via an old formatted filename database (locatedb) that contains an entry with an out-of-range offset, which causes locate to write to arbitrary process memory.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, findutils
References: http://www.osvdb.org/5477, http://www.securityfocus.com/archive/1/200991, http://www.securityfocus.com/bid/3127
CVE-2001-1042
Transsoft Broker 5.9.5.0 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: broker_ftp_server
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://www.securityfocus.com/archive/1/194443, http://www.securityfocus.com/bid/2960, https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-1302
The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwords of other users on other systems or identify valid accounts by monitoring error messages, possibly due to a problem in the NetuserChangePassword function.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000
References: http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1911, http://www.securityfocus.com/bid/3063, https://exchange.xforce.ibmcloud.com/vulnerabilities/6876
CVE-2001-1531
Buffer overflow in Claris Emailer 2.0v2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an email attachment with a long filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: claris_emailer
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0162.html, http://www.iss.net/security_center/static/7314.php, http://www.securityfocus.com/bid/3454
CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/3429
CVE-2001-0583
Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0188.html, http://ftp1.deerfield.com/pub/mdaemon/Archive/3.5.6/, https://exchange.xforce.ibmcloud.com/vulnerabilities/6240
CVE-2001-0500
Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: indexing_service, internet_information_server, index_server
References: http://www.cert.org/advisories/CA-2001-13.html, http://www.ciac.org/ciac/bulletins/l-098.shtml, http://www.iss.net/security_center/static/6705.php
CVE-2001-1549
Tiny Personal Firewall 1.0 and 2.0 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tiny_personal_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html, http://www.iss.net/security_center/static/7671.php, http://www.securityfocus.com/bid/3647
CVE-2001-0837
DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pc-to-phone
References: http://marc.info/?l=bugtraq&m=100403691432052&w=2, http://www.securityfocus.com/bid/3475, https://exchange.xforce.ibmcloud.com/vulnerabilities/7393
CVE-2001-0701
Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunvts
References: http://www.securityfocus.com/archive/1/192667, http://www.securityfocus.com/bid/2898, https://exchange.xforce.ibmcloud.com/vulnerabilities/6736
CVE-2001-1087
The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netcache
References: http://www.securityfocus.com/archive/1/195176, http://www.securityfocus.com/bid/2990, https://exchange.xforce.ibmcloud.com/vulnerabilities/6807
CVE-2001-1565
Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://www.iss.net/security_center/static/7750.php, http://www.macsecurity.org/pipermail/macsec/2001-December/000299.html, http://www.securityfocus.com/bid/3753
CVE-2001-1101
The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: firewall-1
References: http://www.securityfocus.com/archive/1/212826, http://www.securityfocus.com/bid/3303, https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
CVE-2001-0165
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0517.html, http://www.securityfocus.com/bid/2322, https://exchange.xforce.ibmcloud.com/vulnerabilities/6039
CVE-2001-0706
Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rumpus_ftp_server
References: http://www.securityfocus.com/archive/1/190932, http://www.securityfocus.com/bid/2864, https://exchange.xforce.ibmcloud.com/vulnerabilities/6699
CVE-2001-0174
Buffer overflow in Trend Micro Virus Buster 2001 8.00 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a large "To" address.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: virus_buster_2001
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0500.html, http://www.osvdb.org/6138, https://exchange.xforce.ibmcloud.com/vulnerabilities/6034
CVE-2001-0586
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: scanmail_exchange
References: http://archives.neohapsis.com/archives/ntbugtraq/2001-q1/0049.html, http://www.osvdb.org/5581, https://exchange.xforce.ibmcloud.com/vulnerabilities/6311
CVE-2001-0003
Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, office, windows_nt, windows_me
References: http://www.securityfocus.com/bid/2199, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-001, https://exchange.xforce.ibmcloud.com/vulnerabilities/5920
CVE-2001-0916
Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pmake
References: http://marc.info/?l=bugtraq&m=100638919720975&w=2, http://www.iss.net/security_center/static/7603.php, http://www.securityfocus.com/bid/3573
CVE-2001-0492
Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netcruiser_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0427.html, http://www.securityfocus.com/bid/2650, https://exchange.xforce.ibmcloud.com/vulnerabilities/6468
CVE-2001-0141
mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mgetty
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2001-002.0.txt, http://www.debian.org/security/2001/dsa-011
CVE-2001-0868
Red Hat Stronghold 2.3 to 3.0 allows remote attackers to retrieve system information via an HTTP GET request to (1) stronghold-info or (2) stronghold-status.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: stronghold
References: http://marc.info/?l=bugtraq&m=100654958131854&w=2, http://www.securityfocus.com/bid/3577, https://exchange.xforce.ibmcloud.com/vulnerabilities/51950
CVE-2001-1189
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websphere_application_server
References: http://www.iss.net/security_center/static/7698.php, http://www.securityfocus.com/archive/1/245324, http://www.securityfocus.com/bid/3682
CVE-2001-0645
Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the "admin" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netprowler
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0097.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0098.html, http://www.kb.cert.org/vuls/id/508387
CVE-2001-0017
Memory leak in PPTP server in Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed data packet, aka the "Malformed PPTP Packet Stream" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/bid/2368, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-009, https://exchange.xforce.ibmcloud.com/vulnerabilities/6103
CVE-2001-1198
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.iss.net/security_center/static/7729.php, http://www.securityfocus.com/archive/1/245690, http://www.securityfocus.com/bid/3701
CVE-2001-0269
pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0344.html, http://www.osvdb.org/6030, https://exchange.xforce.ibmcloud.com/vulnerabilities/6440
CVE-2001-1055
The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with random source IP and MAC addresses, as demonstrated by ARPNuke.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_98se, windows_98
References: http://www.securityfocus.com/archive/1/200323, http://www.securityfocus.com/bid/3113, https://exchange.xforce.ibmcloud.com/vulnerabilities/6924
CVE-2001-0764
Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: scotty
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0579.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0627.html, http://www.novell.com/linux/security/advisories/2001_023_scotty_txt.html
CVE-2001-0901
Hypermail allows remote attackers to execute arbitrary commands on a server supporting SSI via an attachment with a .shtml extension, which is archived on the server and can then be executed by requesting the URL for the attachment.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hypermail
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://marc.info/?l=bugtraq&m=100626603407639&w=2, http://www.hypermail.org/dist/hypermail-2.1.4.tar.gz, https://exchange.xforce.ibmcloud.com/vulnerabilities/7576
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2001-1152
Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websweeper
References: http://www.mimesweeper.com/support/technotes/notes/1043.asp, http://www.securityfocus.com/archive/1/212283, http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296
CVE-2001-1489
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ie
References: http://www.securityfocus.com/archive/1/245152, http://www.securityfocus.com/bid/3684, https://exchange.xforce.ibmcloud.com/vulnerabilities/7709
CVE-2001-1343
ws_mail.cgi in WebStore 400/400CS 4.14 allows remote authenticated WebStore administrators to execute arbitrary code via shell metacharacters in the kill parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webstore_400cs, webstore_400
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html, http://www.securityfocus.com/bid/2861, https://exchange.xforce.ibmcloud.com/vulnerabilities/6685
CVE-2001-0792
Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xchat
References: http://www.securiteam.com/exploits/5AP0Q2A4AQ.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7416, http://www.securiteam.com/exploits/5AP0Q2A4AQ.html
CVE-2001-1051
Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: darkportal-unix
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971, http://www.securityfocus.com/bid/3390
CVE-2001-1523
Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dmozgateway
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0853.html
CVE-2001-0741
Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hsrp
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0035.html, http://www.cisco.com/networkers/nw00/pres/2402.pdf, http://www.securityfocus.com/bid/2684
CVE-2001-1089
libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nss_postgresql, libnss-pgsql
References: http://www.securityfocus.com/archive/1/213331, http://www.securityfocus.com/bid/3314, https://exchange.xforce.ibmcloud.com/vulnerabilities/7111
CVE-2001-1293
Buffer overflow in web server of 3com HomeConnect Cable Modem External with USB (#3CR29223) allows remote attackers to cause a denial of service (crash) via a long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3cr29223
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0217.html, http://www.kb.cert.org/vuls/id/500027, http://www.securityfocus.com/bid/3366
CVE-2001-1235
pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pslash
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.iss.net/security_center/static/7215.php, http://www.kb.cert.org/vuls/id/847803
CVE-2001-0145
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook, outlook_express
References: http://www.atstake.com/research/advisories/2001/a022301-1.txt, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012, http://www.atstake.com/research/advisories/2001/a022301-1.txt
CVE-2001-0271
mailnews.cgi 1.3 and earlier allows remote attackers to execute arbitrary commands via a user name that contains shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailnews.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html, http://www.securityfocus.com/bid/2391, http://archives.neohapsis.com/archives/bugtraq/2001-02/0347.html
CVE-2001-0922
ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netdynamics
References: http://marc.info/?l=bugtraq&m=100681274915525&w=2, http://www.securityfocus.com/bid/3583, https://exchange.xforce.ibmcloud.com/vulnerabilities/7620
CVE-2001-0989
Buffer overflows in Pileup before 1.2 allows local users to gain root privileges via (1) long command line arguments, or (2) a long callsign.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pileup
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0512.html, http://www.babbage.demon.co.uk/linux/pileup-1.2/pileup-1.2.tar.gz, http://www.securityfocus.com/bid/3086
CVE-2001-0807
Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=189341, https://exchange.xforce.ibmcloud.com/vulnerabilities/6688, http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=189341
CVE-2001-1527
easyNews 1.5 and earlier stores administration passwords in cleartext in settings.php, which allows local users to obtain the passwords and gain access.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: easynews
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html, http://www.iss.net/security_center/static/7659.php, http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html
CVE-2001-1569
Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: openwave_wap_gateway
References: http://www.iss.net/security_center/static/6814.php, http://www.securityfocus.com/archive/1/195619, http://www.iss.net/security_center/static/6814.php
CVE-2001-0103
CoffeeCup Direct and Free FTP clients uses weak encryption to store passwords in the FTPServers.ini file, which could allow attackers to easily decrypt the passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coffeecup_direct_ftp, coffeecup_free_ftp
Related CWEs: CWE-310
References: http://www.securityfocus.com/bid/2107, https://exchange.xforce.ibmcloud.com/vulnerabilities/5744, http://www.securityfocus.com/bid/2107
CWE: CWE-310
CVE-2001-1338
Beck IPC GmbH IPC@CHIP TelnetD server generates different responses when given valid and invalid login names, which allows remote attackers to determine accounts on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ipc_at_chip_telnetd_server
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html, http://www.iss.net/security_center/static/6595.php, http://www.kb.cert.org/vuls/id/198979
CVE-2001-1475
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
References: http://www.kb.cert.org/vuls/id/665372, https://exchange.xforce.ibmcloud.com/vulnerabilities/6490, http://www.kb.cert.org/vuls/id/665372
CVE-2001-0214
Way-board CGI program allows remote attackers to read arbitrary files by specifying the filename in the db parameter and terminating the filename with a null byte.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: way-board
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html, http://www.securityfocus.com/bid/2370, http://archives.neohapsis.com/archives/bugtraq/2001-02/0212.html
CVE-2001-0544
IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_services
References: http://www.ciac.org/ciac/bulletins/l-132.shtml, http://www.securityfocus.com/bid/3195, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE-2001-1196
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webmin
References: http://marc.info/?l=webmin-l&m=100865390306103&w=2, http://www.iss.net/security_center/static/7711.php, http://www.securityfocus.com/archive/1/245980
CVE-2001-0008
Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interbase, firebird
References: http://www.cert.org/advisories/CA-2001-01.html, http://www.securityfocus.com/bid/2192, https://exchange.xforce.ibmcloud.com/vulnerabilities/5911
CVE-2001-1303
The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for the protected network without authentication.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: firewall-1
References: http://www.osvdb.org/588, http://www.securityfocus.com/archive/1/197566, http://www.securityfocus.com/bid/3058
CVE-2001-1445
Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: domino_mail_server
References: http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603, http://www.kb.cert.org/vuls/id/176972, https://exchange.xforce.ibmcloud.com/vulnerabilities/6591
CVE-2001-0970
Cross-site scripting vulnerability in TDForum 1.2 CGI script (tdforum12.cgi) allows remote attackers to execute arbitrary script on other clients via a forum message that contains the script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: td_forum
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0281.html, http://marc.info/?l=bugtraq&m=99832137410609&w=2, http://www.kb.cert.org/vuls/id/782243
CVE-2001-0558
T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jana_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html, http://www.osvdb.org/1817, http://www.securityfocus.com/bid/2704
CVE-2001-0958
Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs (1) register.dll, (2) ContentFilter.dll, (3) SFNofitication.dll, (4) register.dll, (5) TOP10.dll, (6) SpamExcp.dll, and (7) spamrule.dll.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall, interscan_emanager
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0099.html, http://www.securityfocus.com/bid/3327, http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=3142
CVE-2001-1134
Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: docuprint_n40
References: http://www.iss.net/security_center/static/6976.php, http://www.securityfocus.com/archive/1/198381, http://www.securityfocus.com/archive/1/203025
CVE-2001-1175
vipw in the util-linux package before 2.10 causes /etc/shadow to be world-readable in some cases, which would make it easier for local users to perform brute force password guessing.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: util-linux
References: http://www.redhat.com/support/errata/RHSA-2001-095.html, http://www.redhat.com/support/errata/RHSA-2001-132.html, http://www.securityfocus.com/bid/3036
CVE-2001-1186
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_services
References: http://online.securityfocus.com/archive/1/244931, http://online.securityfocus.com/archive/1/245100, http://www.iss.net/security_center/static/7691.php
CVE-2001-1417
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application hang or crash) via a buddy icon GIF file whose length and width values are larger than the actual image data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://www.kb.cert.org/vuls/id/710347, http://www.kb.cert.org/vuls/id/JARL-56TQEN, http://www.securityfocus.com/archive/1/218920
CVE-2001-0451
INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookie_admin_authenticated cookie value to 1.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: indexu
References: http://www.securityfocus.com/archive/1/167172, https://exchange.xforce.ibmcloud.com/vulnerabilities/6202, http://www.securityfocus.com/archive/1/167172
CVE-2001-0010
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bind
References: http://www.cert.org/advisories/CA-2001-02.html, http://www.debian.org/security/2001/dsa-026, http://www.nai.com/research/covert/advisories/047.asp
CVE-2001-0565
Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0016.html, http://online.securityfocus.com/archive/1/184210, http://www.kb.cert.org/vuls/id/446864
CVE-2001-1110
EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eftp
References: http://www.securityfocus.com/archive/1/213647, http://www.securityfocus.com/archive/1/213647
CVE-2001-0432
Buffer overflows in various CGI programs in the remote administration service for Trend Micro Interscan VirusWall 3.01 allow remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interscan_viruswall
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0218.html, http://www.securityfocus.com/bid/2579, http://archives.neohapsis.com/archives/bugtraq/2001-04/0218.html
CVE-2001-1514
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: coldfusion
References: http://www.macromedia.com/v1/Handlers/index.cfm?ID=22263, http://www.macromedia.com/v1/Handlers/index.cfm?ID=22263
CVE-2001-1161
Cross-site scripting (CSS) vulnerability in Lotus Domino 5.0.6 allows remote attackers to execute script on other web clients via a URL that ends in Javascript, which generates an error message that does not quote the resulting script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: domino_r5_server
References: http://www.iss.net/security_center/static/6789.php, http://www.kb.cert.org/vuls/id/642239, http://www.osvdb.org/1887
CVE-2001-0065
Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0189.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5775, http://archives.neohapsis.com/archives/bugtraq/2000-12/0189.html
CVE-2001-1273
The "mxcsr P4" vulnerability in the Linux kernel before 2.2.17-14, when running on certain Intel CPUs, allows local users to cause a denial of service (system halt).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://ciac.llnl.gov/ciac/bulletins/l-045.shtml, http://www.redhat.com/support/errata/RHSA-2001-013.html, http://ciac.llnl.gov/ciac/bulletins/l-045.shtml
CVE-2001-0855
Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: clearcase
References: http://marc.info/?l=bugtraq&m=100528623328037&w=2, http://www.iss.net/security_center/static/7488.php, http://www.securityfocus.com/bid/3523
CVE-2001-1135
ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: prestige
References: http://www.securityfocus.com/archive/1/203022, http://www.securityfocus.com/archive/1/203592, http://www.securityfocus.com/archive/1/204439
CVE-2001-1318
Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eudora_worldmail_server
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0104
MDaemon Pro 3.5.1 and earlier allows local users to bypass the "lock server" security setting by pressing the Cancel button at the password prompt, then pressing the enter key.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mdaemon
References: http://www.securityfocus.com/archive/1/151156, http://www.securityfocus.com/bid/2115, https://exchange.xforce.ibmcloud.com/vulnerabilities/5763
CVE-2001-1505
tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tinc
References: http://www.securityfocus.com/archive/1/249142, http://www.securityfocus.com/bid/3837, https://exchange.xforce.ibmcloud.com/vulnerabilities/7870
CVE-2001-1230
Buffer overflows in Icecast before 1.3.10 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icecast
References: http://marc.info/?l=bugtraq&m=98455723123298&w=2, http://www.debian.org/security/2001/dsa-089, http://www.redhat.com/support/errata/RHSA-2002-063.html