DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1283
The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service (crash) via a mailbox name that contains a large number of . (dot) or other characters to programs such as (1) readmail.cgi or (2) printmail.cgi, possibly due to a buffer overflow that may allow execution of arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/3427
CVE-2001-0241
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://marc.info/?l=bugtraq&m=98874912915948&w=2, http://www.cert.org/advisories/CA-2001-10.html, http://www.osvdb.org/3323
CVE-2001-0618
Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key.  Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: orinoco_rg-1000
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6328, http://archives.neohapsis.com/archives/bugtraq/2001-04/0020.html
CVE-2001-0519
Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: esafe_gateway
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0282.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6580, http://archives.neohapsis.com/archives/bugtraq/2001-05/0282.html
CVE-2001-0825
Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xinetd
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000406, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-029-01, http://www.redhat.com/support/errata/RHSA-2001-092.html
CVE-2001-0489
Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gftp
References: http://archives.neohapsis.com/archives/linux/redhat/2001-q2/0043.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0231.html, http://www.debian.org/security/2001/dsa-057
CVE-2001-1291
The telnet server for 3Com hardware such as PS40 SuperStack II does not delay or disconnect remote attackers who provide an incorrect username or password, which makes it easier to break into the server via brute force password guessing.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: superstack_ii_ps_hub_40, superstack_ii_ps_hub_40_firmware
Related CWEs: CWE-307
Related CAPECs: CAPEC-560, CAPEC-653, CAPEC-600
MITRE ATT&CK Techniques: T1110.004, T1110.001, T1558
MITRE ATT&CK Tactics: T1110
References: http://www.securityfocus.com/archive/1/196957, http://www.securityfocus.com/bid/3034, https://exchange.xforce.ibmcloud.com/vulnerabilities/6855
CWE: CWE-307
MITRE ATT&CK techniques: T1110.004, T1110.001, T1558, T1110.003, T1078
MITRE ATT&CK tactics: T1110
CVE-2001-0135
The default installation of Ultraboard 2000 2.11 creates the Skins, Database, and Backups directories with world-writeable permissions, which could allow local users to modify sensitive information or possibly insert and execute CGI programs.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ultraboard
References: http://marc.info/?l=bugtraq&m=97933458505857&w=2, http://www.securityfocus.com/bid/2197, http://marc.info/?l=bugtraq&m=97933458505857&w=2
CVE-2001-0038
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: offline_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0078.html, http://www.securityfocus.com/bid/2084, https://exchange.xforce.ibmcloud.com/vulnerabilities/5728
CVE-2001-0736
Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: secure_linux, mandrake_linux, mandrake_linux_corporate_server, linux, immunix
References: http://marc.info/?l=bugtraq&m=98749102621604&w=2, http://marc.info/?l=bugtraq&m=99106787825229&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-047.php3?dis=8.0
CVE-2001-0760
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nfuse
References: http://www.securityfocus.com/archive/1/194449, http://www.securityfocus.com/archive/1/194522, http://www.securityfocus.com/bid/2956
CVE-2001-0928
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libgtop_daemon
References: http://marc.info/?l=bugtraq&m=100699007010203&w=2, http://www.debian.org/security/2002/dsa-098, http://www.debian.org/security/2003/dsa-301
CVE-2001-0204
Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firebox_ii
References: http://www.securityfocus.com/archive/1/162965, http://www.securityfocus.com/bid/2369, https://exchange.xforce.ibmcloud.com/vulnerabilities/6109
CVE-2001-1408
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webmail, qube
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0092.html, http://archives.neohapsis.com/archives/bugtraq/2001-08/0245.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6805
CVE-2001-1060
phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argument in tbl_copy.php, or (2) the strRenameTableOK argument in tbl_rename.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin
References: http://freshmeat.net/redir/phpmyadmin/8001/url_changelog/, http://www.securityfocus.com/archive/1/200596, http://www.securityfocus.com/bid/3121
CVE-2001-1222
Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: plesk_server_administrator
References: http://www.iss.net/security_center/static/7735.php, http://www.securityfocus.com/archive/1/246861, http://www.securityfocus.com/bid/3737
CVE-2001-1433
Cherokee web server before 0.2.7 does not properly drop root privileges after binding to port 80, which could allow remote attackers to gain privileges via other vulnerabilities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cherokee_httpd
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0085.html, http://www.kb.cert.org/vuls/id/245795, http://www.securityfocus.com/bid/3771
CVE-2001-1000
rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files via a symlink attack on the rlmadmin.help file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aaa_radius_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0036.html, http://www.securityfocus.com/bid/3302, https://exchange.xforce.ibmcloud.com/vulnerabilities/7096
CVE-2001-1009
Fetchmail (aka fetchmail-ssl) before 5.8.17 allows a remote malicious (1) IMAP server or (2) POP/POP3 server to overwrite arbitrary memory and possibly gain privileges via a negative index number as part of a response to a LIST request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fetchmail
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0118.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000419, http://www.debian.org/security/2001/dsa-071
CWE: CWE-264
CVE-2001-0407
Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0237.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0396.html, http://www.securityfocus.com/bid/2522
CVE-2001-1511
JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://www.iss.net/security_center/static/7676.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=22288&Method=Full, http://www.iss.net/security_center/static/7676.php
CVE-2001-0844
Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: book_of_guests, post_it
References: http://marc.info/?l=bugtraq&m=100446263601021&w=2, http://www.iss.net/security_center/static/7434.php, http://www.iss.net/security_center/static/7435.php
CVE-2001-1125
Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: liveupdate
Related CWEs: CWE-494
Related CAPECs: CAPEC-695, CAPEC-662, CAPEC-657
MITRE ATT&CK Techniques: T1195.001, T1185, T1195.002
MITRE ATT&CK Tactics: T1195
References: http://www.sarc.com/avcenter/security/Content/2001.10.05.html, http://www.securityfocus.com/archive/1/218717, http://www.securityfocus.com/bid/3403
CWE: CWE-494
MITRE ATT&CK techniques: T1195.001, T1185, T1195.002, T1072
MITRE ATT&CK tactics: T1195
CVE-2001-1579
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: open_unix, unixware
References: http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html, http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html
CVE-2001-1207
Buffer overflows in DayDream BBS 2.9 through 2.13 allow remote attackers to possibly execute arbitrary code via the control codes (1) ~#MC, (2) ~#TF, or (3) ~#RA.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: daydream_bbs
References: http://www.cs.uku.fi/~hlyytine/daydream-2.11/ChangeLog, http://www.iss.net/security_center/static/7755.php, http://www.securityfocus.com/archive/1/247708
CVE-2001-0099
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsguest.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html, http://www.stanback.net/, https://exchange.xforce.ibmcloud.com/vulnerabilities/5796
CVE-2001-0948
Cross-site scripting (CSS) vulnerability in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to execute arbitrary code or display false information by including HTML or script in the certificate's description, which is executed when the certificate is viewed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_validation_authority
References: http://marc.info/?l=bugtraq&m=100749428517090&w=2, http://www.securityfocus.com/bid/3619, http://www.valicert.com/support/security_advisory_eva.html
CVE-2001-1325
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets (XSL) that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host (WSH).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook_express, internet_explorer
References: http://www.securityfocus.com/archive/1/3AE02004.57FDF958%40guninski.com, http://www.securityfocus.com/bid/2633, https://exchange.xforce.ibmcloud.com/vulnerabilities/6448
CVE-2001-0514
SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wap11, me102, 802.11b_vnet-b_access_point
References: http://www.securityfocus.com/bid/2896, http://xforce.iss.net/alerts/advise83.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/6576
CVE-2001-0684
Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: collabra_server
References: http://www.securityfocus.com/archive/1/165516, https://exchange.xforce.ibmcloud.com/vulnerabilities/6159, http://www.securityfocus.com/archive/1/165516
CVE-2001-0486
Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bordermanager
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0000.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0020.html, http://marc.info/?l=bugtraq&m=98779821207867&w=2
CVE-2001-1208
Format string vulnerability in DayDream BBS allows remote attackers to execute arbitrary code via format string specifiers in a file containing a ~#RA control code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: daydream_bbs
References: http://marc.info/?l=bugtraq&m=100977623710528&w=2, http://marc.info/?l=bugtraq&m=100977623710528&w=2
CVE-2001-1326
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eudora
References: http://www.securityfocus.com/archive/1/187128, http://www.securityfocus.com/bid/2796, http://www.securityfocus.com/archive/1/187128
CVE-2001-1339
Beck IPC GmbH IPC@CHIP telnet service does not delay or disconnect users from the service when bad passwords are entered, which makes it easier for remote attackers to conduct brute force password guessing attacks.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipc\@chip, ipc\@chip_firmware
Related CWEs: CWE-307
Related CAPECs: CAPEC-560, CAPEC-653, CAPEC-600
MITRE ATT&CK Techniques: T1110.004, T1110.001, T1558
MITRE ATT&CK Tactics: T1110
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html, http://www.iss.net/security_center/static/6605.php, http://www.kb.cert.org/vuls/id/198979
CWE: CWE-307
MITRE ATT&CK techniques: T1110.004, T1110.001, T1558, T1110.003, T1078
MITRE ATT&CK tactics: T1110
CVE-2001-0444
Cisco CBOS 2.3.0.053 sends output of the "sh nat" (aka "show nat") command to the terminal of the next user who attempts to connect to the router via telnet, which could allow that user to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cbos
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0380.html, http://www.osvdb.org/1796, http://www.securityfocus.com/bid/2635
CVE-2001-1053
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: adcycle
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html, http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17, http://www.securityfocus.com/bid/3032
CVE-2001-0917
Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tomcat
References: http://marc.info/?l=bugtraq&m=100654722925155&w=2, http://marc.info/?l=tomcat-dev&m=100658457507305&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/7599
CVE-2001-0134
Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq management software products such as Insight Manager and Management Agents allows remote attackers to execute arbitrary commands via a long user name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: armada_insight_manager, insight_management_agent, insight_manager_xe, management_agents, sanworks_resource_monitor
References: http://marc.info/?l=bugtraq&m=97967435023835&w=2, http://www.securityfocus.com/bid/2200, http://www5.compaq.com/products/servers/management/agentsecurity.html
CVE-2001-0060
Format string vulnerability in stunnel 3.8 and earlier allows attackers to execute arbitrary commands via a malformed ident username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: stunnel
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0337.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000363, http://www.debian.org/security/2001/dsa-009
CVE-2001-0904
Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=100619268115798&w=2, http://www.iss.net/security_center/static/7581.php, http://www.securityfocus.com/bid/3556
CVE-2001-1062
Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.12/CSSA-2001-SCO.12.txt, http://www.iss.net/security_center/static/7034.php, ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.12/CSSA-2001-SCO.12.txt
CVE-2001-0754
Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cbos
References: http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7299, http://www.cisco.com/warp/public/707/CBOS-multiple2-pub.html
CVE-2001-1439
Buffer overflow in the text editor functionality in HP-UX 10.01 through 11.04 on HP9000 Series 700 and Series 800 allows local users to cause a denial of service ("system availability") via text editors such as (1) e, (2) ex, (3) vi, (4) edit, (5) view, and (6) vedit.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www.auscert.org.au/render.html?it=1176, http://www.kb.cert.org/vuls/id/268848, http://www.securityfocus.com/archive/1/163910
CVE-2001-0739
Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux
References: http://www.linuxsecurity.com/advisories/other_advisory-1404.html, http://www.redhat.com/support/errata/RHSA-2001-126.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7404
CVE-2001-0522
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: privacy_guard
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01, http://online.securityfocus.com/archive/1/188218
CVE-2001-0056
The Cisco Web Management interface in routers running CBOS 2.4.1 and earlier does not log invalid logins, which allows remote attackers to guess passwords without detection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: broadband_operating_system
References: http://www.cisco.com/warp/public/707/CBOS-multiple.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/5628, http://www.cisco.com/warp/public/707/CBOS-multiple.shtml
CVE-2001-0852
TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=100498100112191&w=2, http://marc.info/?l=tux-list&m=100584714702328&w=2, http://www.redhat.com/support/errata/RHSA-2001-142.html
CVE-2001-1541
Buffer overflow in Unix-to-Unix Copy Protocol (UUCP) in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsd_os
References: http://www.iss.net/security_center/static/7633.php, http://www.securityfocus.com/archive/1/243096, http://www.securityfocus.com/bid/3603
CVE-2001-0244
Buffer overflow in Microsoft Index Server 2.0 allows remote attackers to execute arbitrary commands via a long search parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: index_server
References: http://www.securityfocus.com/bid/2709, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025, https://exchange.xforce.ibmcloud.com/vulnerabilities/6517
CVE-2001-0854
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=100525739116093&w=2, http://www.iss.net/security_center/static/7478.php, http://www.securityfocus.com/bid/3510
CVE-2001-1336
CesarFTP 0.98b and earlier stores usernames and passwords in plaintext in the settings.ini file, which allows attackers to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cesarftp
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0252.html, http://www.iss.net/security_center/static/6608.php, http://www.securityfocus.com/bid/2785
CVE-2001-0039
IPSwitch IMail 6.0.5 allows remote attackers to cause a denial of service using the SMTP AUTH command by sending a base64-encoded user password whose length is between 80 and 136 bytes.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0071.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/2083
CVE-2001-0891
Format string vulnerability in NQS daemon (nqsdaemon) in NQE 3.3.0.16 for CRAY UNICOS and SGI IRIX allows a local user to gain root privileges by using qsub to submit a batch job whose name contains formatting characters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nqsdaemon, unicos
References: ftp://patches.sgi.com/support/free/security/advisories/20020101-01-I, http://marc.info/?l=bugtraq&m=100695627423924&w=2, http://www.osvdb.org/3275
CVE-2001-1223
The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lancom_1100_office
References: http://www.iss.net/security_center/static/7739.php, http://www.securityfocus.com/archive/1/247274, http://www.securityfocus.com/bid/3746
CVE-2001-0419
Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://marc.info/?l=bugtraq&m=98692227816141&w=2, http://www.securityfocus.com/bid/2569, http://marc.info/?l=bugtraq&m=98692227816141&w=2
CVE-2001-0769
Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: guildftpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6613, http://archives.neohapsis.com/archives/bugtraq/2001-05/0254.html
CVE-2001-0914
Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, suse_linux
References: http://marc.info/?l=bugtraq&m=100638584813349&w=2, http://marc.info/?l=bugtraq&m=100654787226869&w=2L:2, http://www.securityfocus.com/bid/3570
CVE-2001-1238
Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
Related CWEs: CWE-178
References: http://www.securityfocus.com/archive/1/197195, http://www.securityfocus.com/bid/3033, https://exchange.xforce.ibmcloud.com/vulnerabilities/6919
CWE: CWE-178
CVE-2001-0659
Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://online.securityfocus.com/archive/1/209385, http://www.securityfocus.com/bid/3215, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-046
CVE-2001-0857
Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webmail
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000437, http://marc.info/?l=bugtraq&m=100535679608486&w=2, http://marc.info/?l=bugtraq&m=100540578822469&w=2
CVE-2001-0338
Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.ciac.org/ciac/bulletins/l-087.shtml, http://www.securityfocus.com/bid/2735, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027
CVE-2001-0047
The default permissions for the MTS Package Administration registry key in Windows NT 4.0 allows local users to install or modify arbitrary Microsoft Transaction Server (MTS) packages and gain privileges, aka one of the "Registry Permissions" vulnerabilities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/bid/2065, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095, https://exchange.xforce.ibmcloud.com/vulnerabilities/5673
CVE-2001-0202
Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: picserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0073.html, http://www.securityfocus.com/bid/2339, http://archives.neohapsis.com/archives/bugtraq/2001-02/0073.html
CVE-2001-0999
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook_express
References: http://www.securityfocus.com/archive/1/213754, http://www.securityfocus.com/archive/1/214453, http://www.securityfocus.com/bid/3334
CVE-2001-1120
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: coldfusion_server
References: http://www.allaire.com/handlers/index.cfm?id=21566, http://www.kb.cert.org/vuls/id/135531, http://www.securityfocus.com/archive/1/196452
CVE-2001-0155
Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vshell
References: http://www.atstake.com/research/advisories/2001/a021601-1.txt, http://www.vandyke.com/products/vshell/security102.html, http://www.atstake.com/research/advisories/2001/a021601-1.txt
CVE-2001-0018
Windows 2000 domain controller in Windows 2000 Server, Advanced Server, or Datacenter Server allows remote attackers to cause a denial of service via a flood of malformed service requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://online.securityfocus.com/archive/82/148411, http://www.ciac.org/ciac/bulletins/l-049.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-011
CVE-2001-0871
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: alchemy_network_monitor, alchemy_eye
References: http://marc.info/?l=bugtraq&m=100714173510535&w=2, http://www.kb.cert.org/vuls/id/220715, http://www.securityfocus.com/bid/3599
CVE-2001-0493
Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: small_http_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0428.html, http://home.lanck.net/mf/srv/index.htm, http://www.securityfocus.com/bid/2649
CVE-2001-0909
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_xp
References: http://marc.info/?l=bugtraq&m=100638955422011&w=2, http://www.securityfocus.com/bid/6802, https://exchange.xforce.ibmcloud.com/vulnerabilities/7605
CVE-2001-0678
A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2 allows a local attacker to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_viruswall, interscan_webmanager
References: http://www.securityfocus.com/archive/1/185383, https://exchange.xforce.ibmcloud.com/vulnerabilities/6575, http://www.securityfocus.com/archive/1/185383
CVE-2001-0820
Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ghttp
References: http://marc.info/?l=bugtraq&m=99279182704674&w=2, http://marc.info/?l=bugtraq&m=99406263214417&w=2, http://www.securityfocus.com/bid/2879
CVE-2001-0192
Buffer overflows in CTRLServer in XMail allows attackers to execute arbitrary commands via the cfgfileget or domaindel functions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xmail
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0047.html, http://xmailserver.org/XMail-Readme.txt, http://archives.neohapsis.com/archives/bugtraq/2001-02/0047.html
CVE-2001-1518
RunAs (runas.exe) in Windows 2000 only creates one session instance at a time, which allows local users to cause a denial of service (RunAs hang) by creating a named pipe session with the authentication server without any request for service.  NOTE: the vendor disputes this vulnerability, however the vendor also presents a scenario in which other users could be affected if running on a Terminal Server. Therefore this is a vulnerability.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html, http://online.securityfocus.com/archive/1/236113, http://www.iss.net/security_center/static/7533.php
CVE-2001-0966
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nudester
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html, http://www.securityfocus.com/bid/3202, http://archives.neohapsis.com/archives/bugtraq/2001-08/0232.html
CVE-2001-1375
tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409, http://www.iss.net/security_center/static/6869.php, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060
CVE-2001-1088
Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook, outlook_express
References: http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241, http://www.securityfocus.com/archive/1/188752, http://www.securityfocus.com/bid/2823
CVE-2001-1568
CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: wap_gateway
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0127.html, http://www.iss.net/security_center/static/6814.php, http://archives.neohapsis.com/archives/bugtraq/2001-07/0127.html
CVE-2001-1347
Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0232.html, http://www.iss.net/security_center/static/6590.php, http://www.securityfocus.com/bid/2764
CVE-2001-0120
useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: linux, immunix, mandrake_linux
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-007.php3, http://www.securityfocus.com/bid/2196
CVE-2001-1395
Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE-2001-0898
Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: opera_web_browser
References: http://marc.info/?l=bugtraq&m=100586079932284&w=2, http://marc.info/?l=bugtraq&m=100588139312696&w=2, http://www.iss.net/security_center/static/7567.php
CVE-2001-1421
AOL Instant Messenger (AIM) 4.7 and earlier allows remote attackers to cause a denial of service (application crash) via a large number of different fonts followed by an HTML HR tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://www.kb.cert.org/vuls/id/530299, http://www.kb.cert.org/vuls/id/JARL-569MD7, http://www.securityfocus.com/archive/1/218920
CVE-2001-0376
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys.  This allows a remote attacker to brute force attack the pre-shared keys with significantly less resources than if the full 128 byte IKE pre-shared keys were used.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: soho2, tele2
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6304, http://archives.neohapsis.com/archives/bugtraq/2001-03/0403.html
CVE-2001-0447
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 602pro_lan_suite
References: http://www.securityfocus.com/archive/1/171418, http://www.securityfocus.com/bid/2514, http://www.securityfocus.com/archive/1/171418
CVE-2001-0408
vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: vim
References: http://marc.info/?l=bugtraq&m=98593106111968&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3
CVE-2001-0481
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-043.php3, http://www.osvdb.org/5612, https://exchange.xforce.ibmcloud.com/vulnerabilities/6494
CVE-2001-0992
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shopplus_cart
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7077, http://archives.neohapsis.com/archives/bugtraq/2001-09/0012.html
CVE-2001-1220
D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dwl-1000ap
References: http://www.iss.net/security_center/static/7733.php, http://www.securityfocus.com/archive/1/246849, http://www.securityfocus.com/bid/3735
CVE-2001-0344
An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sql_server
References: http://www.ciac.org/ciac/bulletins/l-095.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032, https://exchange.xforce.ibmcloud.com/vulnerabilities/6684
CVE-2001-0708
Denicomp REXECD 1.05 and earlier allows a remote attacker to cause a denial of service (crash) via a long string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rexecd
References: http://www.securityfocus.com/archive/1/183911, https://exchange.xforce.ibmcloud.com/vulnerabilities/6524, http://www.securityfocus.com/archive/1/183911
CVE-2001-1172
OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: httprotect
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0357.html, http://www.omnisecure.com/security-alert.html, http://www.osvdb.org/5452
CVE-2001-1352
Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: namazu
References: http://marc.info/?l=bugtraq&m=100947261916155&w=2, http://marc.info/?l=bugtraq&m=101060476404565&w=2, http://marc.info/?l=bugtraq&m=101068116016472&w=2
CVE-2001-1334
Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpslash
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0126.html, http://marc.info/?l=phpslash&m=99029398904419&w=2, http://www.iss.net/security_center/static/9990.php
CVE-2001-1130
Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/2001_027_sdb_txt.html, http://www.securityfocus.com/archive/1/201216, https://exchange.xforce.ibmcloud.com/vulnerabilities/7003