DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1508
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.38/CSSA-2001-SCO.38.txt, http://www.securityfocus.com/bid/2597, https://exchange.xforce.ibmcloud.com/vulnerabilities/6413
CVE-2001-0808
gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gnatsweb
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0365.html, http://sources.redhat.com/gnats/gnatsweb/advisory-jun-26-2001.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6753
CVE-2001-1507
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0111/114.html, http://www.iss.net/security_center/static/7598.php, http://www.openbsd.org/errata30.html#sshd
CVE-2001-0220
Buffer overflow in ja-elvis and ko-helvis ports of elvis allow local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ko-helvis, ja-elvis
References: http://archives.neohapsis.com/archives/freebsd/2001-02/0082.html, http://archives.neohapsis.com/archives/freebsd/2001-02/0082.html
CVE-2001-1405
Bugzilla before 2.14 does not restrict access to sanitycheck.cgi, which allows local users to cause a denial of service (CPU consumption) via a flood of requests to sanitycheck.cgi.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=54556, http://marc.info/?l=bugtraq&m=99912899900567, http://www.redhat.com/support/errata/RHSA-2001-107.html
CVE-2001-0150
Internet Explorer 5.5 and earlier executes Telnet sessions using command line arguments that are specified by the web site, which could allow remote attackers to execute arbitrary commands if the IE client is using the Telnet client provided in Services for Unix (SFU) 2.0, which creates session transcripts.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://www.osvdb.org/7816, http://www.securityfocus.com/bid/2463, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
CWE: CWE-88
CVE-2001-0773
Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3220-h_dsl_router
References: http://www.kb.cert.org/vuls/id/312761, http://www.securityfocus.com/archive/1/195644, http://www.securityfocus.com/bid/3001
CVE-2001-0564
APC Web/SNMP Management Card prior to Firmware 310 only supports one telnet connection, which allows a remote attacker to create a denial of service via repeated failed logon attempts which temporarily locks the card.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ap9606
References: ftp://ftp.apcftp.com/hardware/webcard/firmware/sy/v310/install.txt, http://archives.neohapsis.com/archives/bugtraq/2001-02/0436.html, http://www.securityfocus.com/bid/2430
CVE-2001-0148
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015, https://exchange.xforce.ibmcloud.com/vulnerabilities/6227
CVE-2001-1206
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $error_log variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: last_lines
References: http://marc.info/?l=bugtraq&m=100975978324723&w=2, http://www.securityfocus.com/bid/3755, http://marc.info/?l=bugtraq&m=100975978324723&w=2
CVE-2001-0050
Buffer overflow in BitchX IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary commands via an IP address that resolves to a long DNS hostname or domain name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bitchx
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:78.bitchx.v1.1.asc, http://archives.neohapsis.com/archives/bugtraq/2000-12/0081.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0086.html
CVE-2001-1014
eshop.pl in WebDiscount(e)shop allows remote attackers to execute arbitrary commands via shell metacharacters in the seite parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webdiscount_e_shop_online_shop_system
References: http://www.securityfocus.com/archive/1/214456, http://www.securityfocus.com/bid/3340, https://exchange.xforce.ibmcloud.com/vulnerabilities/7128
CVE-2001-0430
Vulnerability in exuberant-ctags before 3.2.4-0.1 insecurely creates temporary files.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: debian_linux
References: http://www.osvdb.org/5642, https://exchange.xforce.ibmcloud.com/vulnerabilities/6388, https://www.debian.org/security/2001/dsa-046
CVE-2001-1019
Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sglmerchant
References: http://www.securityfocus.com/archive/1/212825, http://www.securityfocus.com/bid/3309, https://exchange.xforce.ibmcloud.com/vulnerabilities/7100
CVE-2001-0642
Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: incredimail
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0078.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6529, http://archives.neohapsis.com/archives/bugtraq/2001-05/0078.html
CVE-2001-0554
Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, aix, netbsd, openbsd, freebsd
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:49.telnetd.asc, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-012.txt.asc, ftp://patches.sgi.com/support/free/security/advisories/20010801-01-P
CWE: CWE-120
CVE-2001-0761
Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_webmanager
References: http://www.securityfocus.com/archive/1/194463, http://www.securityfocus.com/bid/2959, http://www.securityfocus.com/archive/1/194463
CVE-2001-0311
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: omniback_ii, hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q1/0022.html, http://archives.neohapsis.com/archives/hp/2001-q1/0023.html, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0102-142
CVE-2001-1432
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: cherokee_httpd
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html, http://www.kb.cert.org/vuls/id/464827, http://www.securityfocus.com/bid/3772
CWE: CWE-22
CVE-2001-0348
Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://razor.bindview.com/publish/advisories/adv_mstelnet.html, http://www.ciac.org/ciac/bulletins/l-092.shtml, http://www.securityfocus.com/bid/2838
CVE-2001-1368
Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: iplanet_web_server
References: http://archives.neohapsis.com/archives/hp/2001-q2/0059.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6697, http://archives.neohapsis.com/archives/hp/2001-q2/0059.html
CVE-2001-0404
Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: javaserver_web_dev_kit
References: http://marc.info/?l=bugtraq&m=98583089425166&w=2, http://marc.info/?l=bugtraq&m=98583089425166&w=2
CVE-2001-1025
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.html, http://www.securityfocus.com/bid/3149, http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.html
CVE-2001-0830
6tunnel 0.08 and earlier does not properly close sockets that were initiated by a client, which allows remote attackers to cause a denial of service (resource exhaustion) by repeatedly connecting to and disconnecting from the server.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 6tunnel
Related CWEs: CWE-772
Related CAPECs: CAPEC-469
MITRE ATT&CK Techniques: T1499.002
MITRE ATT&CK Tactics: T1499
References: ftp://213.146.38.146/pub/wojtekka/6tunnel-0.09.tar.gz, http://marc.info/?l=bugtraq&m=100386451702966&w=2, http://www.securityfocus.com/bid/3467
CWE: CWE-772
MITRE ATT&CK techniques: T1499.002
MITRE ATT&CK tactics: T1499
CVE-2001-0546
Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: isa_server
References: http://www.securityfocus.com/bid/3196, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045, https://exchange.xforce.ibmcloud.com/vulnerabilities/6989
CVE-2001-0735
Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cfingerd
References: http://www.debian.org/security/2001/dsa-066, http://www.securityfocus.com/archive/1/01071120191900.00788%40localhost.localdomain, http://www.securityfocus.com/archive/1/192844
CVE-2001-0695
WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive (A:\).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd
References: http://www.securityfocus.com/archive/1/182054, https://exchange.xforce.ibmcloud.com/vulnerabilities/6496, http://www.securityfocus.com/archive/1/182054
CVE-2001-1349
Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: sendmail
References: http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html, http://razor.bindview.com/publish/advisories/adv_sm8120.html, http://rhn.redhat.com/errata/RHSA-2001-106.html
CVE-2001-1015
Buffer overflow in Snes9x 1.37, when installed setuid root, allows local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: snes9x
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0107.html, http://www.securityfocus.com/bid/3437, http://archives.neohapsis.com/archives/bugtraq/2001-10/0107.html
CVE-2001-1231
GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the "Padlock" fix.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise
References: http://support.novell.com/padlock/details.htm, http://www.securityfocus.com/archive/1/204672, http://www.securityfocus.com/bid/3189
CVE-2001-1453
Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://dev.mysql.com/doc/mysql/en/news-3-23-33.html, http://www.kb.cert.org/vuls/id/123384, http://www.securityfocus.com/archive/1/161917
CVE-2001-1387
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: iptables
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500, http://rhn.redhat.com/errata/RHSA-2001-144.html, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500
CWE: CWE-203
CVE-2001-1583
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://marc.info/?l=bugtraq&m=99929694701826&w=2, http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pm, http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.html
CWE: CWE-78
CVE-2001-1587
NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netware
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-119
CVE-2001-1050
CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ccc
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.securityfocus.com/bid/3389, https://exchange.xforce.ibmcloud.com/vulnerabilities/7215
CVE-2001-1471
prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement.
CVSS v3.1 Score: 8.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
Related CWEs: CWE-665
Related CAPECs: CAPEC-29, CAPEC-26
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html, http://www.kb.cert.org/vuls/id/920931
CWE: CWE-665
CVE-2001-0774
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tripwire
References: http://www.kb.cert.org/vuls/id/349019, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-064.php3, http://www.osvdb.org/1895
CVE-2001-0186
Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: free_java_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0061.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0061.html
CVE-2001-1228
Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gzip
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-002.txt.asc, http://online.securityfocus.com/archive/1/247717, http://www.iss.net/security_center/static/7882.php
CVE-2001-1006
Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: truesync_desktop
References: http://www.securityfocus.com/archive/1/210067, http://www.securityfocus.com/bid/3232, http://www.securityfocus.com/archive/1/210067
CVE-2001-0227
Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: biblioweb_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html
CVE-2001-0567
Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zope
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000407, http://www.debian.org/security/2001/dsa-055, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-049.php3
CVE-2001-0264
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: g6_ftp_server
References: http://www.atstake.com/research/advisories/2001/a040301-1.txt, http://www.securityfocus.com/bid/2534, http://www.atstake.com/research/advisories/2001/a040301-1.txt
CVE-2001-0089
Internet Explorer 5.0 through 5.5 allows remote attackers to read arbitrary files from the client via the INPUT TYPE element in an HTML form, aka the "File Upload via Form" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093, https://exchange.xforce.ibmcloud.com/vulnerabilities/5615, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093
CVE-2001-0842
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lb5000
References: http://marc.info/?l=bugtraq&m=100446455809273&w=2, http://www.iss.net/security_center/static/7436.php, http://www.securityfocus.com/bid/3484
CVE-2001-0864
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.osvdb.org/1986
CVE-2001-0454
Directory traversal vulnerability in SlimServe HTTPd 1.1a allows remote attackers to read arbitrary files via a ... (modified dot dot) in the HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: slimserve
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0532.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6186, http://archives.neohapsis.com/archives/bugtraq/2001-02/0532.html
CVE-2001-1022
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jgroff, groff
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000428, http://www.debian.org/security/2001/dsa-072, http://www.debian.org/security/2002/dsa-107
CVE-2001-1147
The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: util-linux
References: http://www.ciac.org/ciac/bulletins/m-009.shtml, http://www.iss.net/security_center/static/7266.php, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-084.php3
CVE-2001-0540
Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: terminal_server
References: http://www.securityfocus.com/bid/3099, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-040, https://exchange.xforce.ibmcloud.com/vulnerabilities/6912
CVE-2001-0521
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: esafe_gateway
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0285.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6580, http://archives.neohapsis.com/archives/bugtraq/2001-05/0285.html
CVE-2001-0117
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: secure_linux, linux, mandrake_linux_corporate_server, mandrake_linux, immunix
References: http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2000-70-028-01, http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.kb.cert.org/vuls/id/579928
CVE-2001-0671
Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www.cert.org/advisories/CA-2001-30.html, http://www.kb.cert.org/vuls/id/388183, http://www.kb.cert.org/vuls/id/466239
CVE-2001-1234
Bharat Mediratta Gallery PHP script before 1.2.1 allows remote attackers to execute arbitrary code by including files from remote web sites via an HTTP request that modifies the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gallery
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://prdownloads.sourceforge.net/gallery/gallery-1.2.5.tar.gz, http://www.iss.net/security_center/static/7215.php
CVE-2001-0368
Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bearshare
References: http://www.osvdb.org/1810, http://www.securityfocus.com/archive/1/180644, http://www.securityfocus.com/bid/2672
CVE-2001-0667
Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed, aka a new variant of the Telnet Invocation vulnerability as described in CVE-2001-0150.
CVSS v3.1 Score: 7.3 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://www.ciac.org/ciac/bulletins/m-024.shtml, http://www.kb.cert.org/vuls/id/952611, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-051
CWE: CWE-88
CVE-2001-0240
Microsoft Word before Word 2002 allows attackers to automatically execute macros without warning the user via a Rich Text Format (RTF) document that links to a template with the embedded macro.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: word
References: http://www.securityfocus.com/bid/2753, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-028, https://exchange.xforce.ibmcloud.com/vulnerabilities/6571
CVE-2001-0198
Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: quicktime
References: http://marc.info/?l=bugtraq&m=98096678523370&w=2, http://www.exploit-db.com/exploits/20605, http://www.securityfocus.com/bid/2328
CVE-2001-1388
iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: iptables
Related CWEs: CWE-770
Related CAPECs: CAPEC-493, CAPEC-488, CAPEC-489
MITRE ATT&CK Techniques: T1498.002, T1499, T1498.001
MITRE ATT&CK Tactics: T1498, T1499
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325, http://rhn.redhat.com/errata/RHSA-2001-144.html, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=53325
CWE: CWE-770
MITRE ATT&CK techniques: T1498.002, T1499, T1498.001, T1499.001, T1499.002, T1499.003
MITRE ATT&CK tactics: T1498, T1499
CVE-2001-0839
ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: processing_plus
References: http://marc.info/?l=bugtraq&m=100404371423927&w=2, http://www.securityfocus.com/bid/3476, https://exchange.xforce.ibmcloud.com/vulnerabilities/7352
CVE-2001-1183
PPTP implementation in Cisco IOS 12.1 and 12.2 allows remote attackers to cause a denial of service (crash) via a malformed packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/PPTP-vulnerability-pub.html, http://www.kb.cert.org/vuls/id/656315, http://www.osvdb.org/802
CVE-2001-1315
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: injoin_directory_server, livecontent_directory
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0770.html, http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html
CVE-2001-1148
Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: http://www.securityfocus.com/archive/1/219966, http://www.securityfocus.com/archive/82/191216, https://exchange.xforce.ibmcloud.com/vulnerabilities/7281
CVE-2001-0389
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: net.commerce, websphere_application_server
References: http://www.securityfocus.com/archive/1/176100, http://www.securityfocus.com/bid/2587, http://www.securityfocus.com/archive/1/176100
CVE-2001-0074
Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the board parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: technote
References: http://www.securityfocus.com/archive/1/153007, http://www.securityfocus.com/bid/2155, http://www.securityfocus.com/archive/1/153007
CVE-2001-1292
Sambar Telnet Proxy/Server allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sambar_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0160.html, http://www.iss.net/security_center/static/6973.php, http://archives.neohapsis.com/archives/bugtraq/2001-08/0160.html
CVE-2001-0649
Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: personal_web_sharing
References: http://www.securityfocus.com/archive/1/184548, https://exchange.xforce.ibmcloud.com/vulnerabilities/6536, http://www.securityfocus.com/archive/1/184548
CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websphere_application_server, websphere_commerce_suite
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html, http://www.osvdb.org/5492, http://www14.software.ibm.com/webapp/download/postconfig.jsp?id=4000805&pf=Multi-Platform&v=3.0.2&e=Standard+%26+Advanced+Editions&cat=&s=p
CVE-2001-1233
Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services (NDS) enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise_webaccess, netware
References: http://www.securityfocus.com/archive/1/204875, https://exchange.xforce.ibmcloud.com/vulnerabilities/6987, http://www.securityfocus.com/archive/1/204875
CVE-2001-0483
Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: raptor_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0359.html, http://www.securityfocus.com/archive/1/171953, http://www.securityfocus.com/bid/2517
CVE-2001-0501
Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: word
References: http://marc.info/?l=bugtraq&m=99325144322224&w=2, http://www.securityfocus.com/bid/2876, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-034
CVE-2001-0709
Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_information_server
References: http://www.securityfocus.com/archive/1/192802, http://www.securityfocus.com/bid/2909, https://exchange.xforce.ibmcloud.com/vulnerabilities/6742
CVE-2001-1434
Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an "snmp-server host" command, which creates a readable "community" community string if one has not been previously created.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ios
References: http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml, http://www.kb.cert.org/vuls/id/848944, https://exchange.xforce.ibmcloud.com/vulnerabilities/6178
CVE-2001-0458
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, eperl, suse_linux, mandrake_linux
References: http://www.debian.org/security/2001/dsa-034, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-027.php3, http://www.novell.com/linux/security/advisories/2001_008_eperl.html
CVE-2001-1124
rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www.ciac.org/ciac/bulletins/m-003.shtml, http://www.securityfocus.com/advisories/3586, http://www.securityfocus.com/bid/3400
CVE-2001-0387
Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hylafax
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0236.html, http://archives.neohapsis.com/archives/freebsd/2001-04/0606.html, http://lists.suse.com/archives/suse-security-announce/2001-Apr/0005.html
CVE-2001-0011
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bind
References: http://www.cert.org/advisories/CA-2001-02.html, http://www.nai.com/research/covert/advisories/047.asp, http://www.redhat.com/support/errata/RHSA-2001-007.html
CVE-2001-0172
Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, reiserfs
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0127.html, http://www.securityfocus.com/bid/2180, https://exchange.xforce.ibmcloud.com/vulnerabilities/5910
CVE-2001-0367
Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icq
References: http://marc.info/?l=bugtraq&m=98847544303438&w=2, http://www.securityfocus.com/bid/2664, http://marc.info/?l=bugtraq&m=98847544303438&w=2
CVE-2001-1059
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: workstation
References: http://www.osvdb.org/5475, http://www.securityfocus.com/archive/1/200455, http://www.securityfocus.com/bid/3119
CVE-2001-1415
vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/016_recover.patch, http://www.kb.cert.org/vuls/id/191675, https://exchange.xforce.ibmcloud.com/vulnerabilities/10149
CVE-2001-0359
Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: half-life_dedicated_server, half-life
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6220, http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html
CVE-2001-0850
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux
References: http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/7427, http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt
CVE-2001-1340
Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ipc_at_chip_telnetd_server
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html, http://www.iss.net/security_center/static/6596.php, http://www.kb.cert.org/vuls/id/756019
CVE-2001-0316
Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html, http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt, http://www.osvdb.org/6017
CVE-2001-0059
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://marc.info/?l=bugtraq&m=97720205217707&w=2, http://www.securityfocus.com/bid/2127, https://exchange.xforce.ibmcloud.com/vulnerabilities/5789
CVE-2001-0717
Format string vulnerability in ToolTalk database server rpc.ttdbserverd allows remote attackers to execute arbitrary commands via format string specifiers that are passed to the syslog function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tooltalk_database_server
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.28/CSSA-2001-SCO.28.txt, http://ftp.support.compaq.com/patches/.new/html/SSRT0767U.shtml, http://online.securityfocus.com/advisories/3584
CVE-2001-0175
The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fasttrack_server
References: http://marc.info/?l=bugtraq&m=98021351718874&w=2, http://marc.info/?l=bugtraq&m=98035833331446&w=2, http://www.securityfocus.com/bid/2273
CVE-2001-0094
Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:25.kerberosIV.asc, ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-017.txt.asc, https://exchange.xforce.ibmcloud.com/vulnerabilities/5734
CVE-2001-0840
Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: insight_manager_xe
References: http://www.compaq.com/products/servers/management/mgtsw-advisory.html, http://www.iss.net/security_center/static/7411.php, http://www.kb.cert.org/vuls/id/908611
CVE-2001-0341
Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: frontpage_server_extensions, windows_2000, windows_nt
References: http://marc.info/?l=bugtraq&m=99348216322147&w=2, http://www.osvdb.org/577, http://www.securityfocus.com/bid/2906
CVE-2001-1413
Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ncompress
References: http://seclists.org/lists/vuln-dev/2001/Nov/0202.html, http://security.gentoo.org/glsa/glsa-200410-08.xml, http://www.kb.cert.org/vuls/id/176363
CVE-2001-0570
minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: minicom
References: http://marc.info/?l=bugtraq&m=99014300904714&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2001-016.0.txt, http://www.redhat.com/support/errata/RHSA-2001-067.html
CVE-2001-1396
Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE-2001-1021
Buffer overflows in WS_FTP 2.02 allow remote attackers to execute arbitrary code via long arguments to (1) DELE, (2) MDTM, (3) MLST, (4) MKD, (5) RMD, (6) RNFR, (7) RNTO, (8) SIZE, (9) STAT, (10) XMKD, or (11) XRMD.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ws_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0610.html, http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6911
CVE-2001-1106
The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sambar_server
References: http://www.securityfocus.com/archive/1/199418, http://www.securityfocus.com/bid/3095, https://exchange.xforce.ibmcloud.com/vulnerabilities/6909
CVE-2001-0232
newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via shell metacharacters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: news_desk
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html
CVE-2001-1072
Apache with mod_rewrite enabled on most UNIX systems allows remote attackers to bypass RewriteRules by inserting extra / (slash) characters into the requested path, which causes the regular expression in the RewriteRule to fail.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://www.apacheweek.com/issues/02-02-01#security, http://www.securityfocus.com/archive/1/203955, http://www.securityfocus.com/bid/3176
CVE-2001-0274
kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kicq
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0276.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0536.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6112