DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0127
Buffer overflow in Olivier Debon Flash plugin (not the Macromedia plugin) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long DefineSound tag.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: flash
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0236.html, http://www.kb.cert.org/vuls/id/451096, http://www.securityfocus.com/bid/2214
CVE-2001-1522
Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0851.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0848.html
CVE-2001-0262
Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smartdownload
References: http://www.atstake.com/research/advisories/2001/a041301-1.txt, http://www.atstake.com/research/advisories/2001/a041301-1.txt
CVE-2001-0273
pgp4pine Pine/PGP interface version 1.75-6 does not properly check to see if a public key has expired when obtaining the keys via Gnu Privacy Guard (GnuPG), which causes the message to be sent in cleartext.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: pgp4pine
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0367.html, http://www.kb.cert.org/vuls/id/566640, http://www.securityfocus.com/bid/2405
CVE-2001-0402
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd, ipfilter, freebsd
References: http://archives.neohapsis.com/archives/freebsd/2001-04/0338.html, http://marc.info/?l=bugtraq&m=98679734015538&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6331
CVE-2001-0902
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_services
References: http://marc.info/?l=bugtraq&m=100626531103946&w=2, http://marc.info/?l=ntbugtraq&m=100627497122247&w=2, http://www.securityfocus.com/bid/6795
CVE-2001-0698
Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: surgeftp
References: http://www.netwinsite.com/surgeftp/manual/updates.htm, http://www.securityfocus.com/archive/1/191916, http://www.securityfocus.com/bid/2892
CVE-2001-1166
linprocfs on FreeBSD 4.3 and earlier does not properly restrict access to kernel memory, which allows one process with debugging rights on a privileged process to read restricted memory from that process.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:55.procfs.asc, http://www.iss.net/security_center/static/7017.php, http://www.osvdb.org/1938
CVE-2001-0550
wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd, ftpd-bsd
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000442, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-036-01, http://marc.info/?l=bugtraq&m=100700363414799&w=2
CVE-2001-1429
Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: midnight_commander
References: http://www.kb.cert.org/vuls/id/203203, https://exchange.xforce.ibmcloud.com/vulnerabilities/10630, http://www.kb.cert.org/vuls/id/203203
CVE-2001-0967
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: arkeia
Related CWEs: CWE-916
Related CAPECs: CAPEC-55
MITRE ATT&CK Techniques: T1110.002
MITRE ATT&CK Tactics: T1110
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html, http://www.securityfocus.com/bid/3204, http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html
CWE: CWE-916
MITRE ATT&CK techniques: T1110.002
MITRE ATT&CK tactics: T1110
CVE-2001-0169
When using the LD_PRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: secure_linux, linux, mandrake_linux_corporate_server, mandrake_linux, turbolinux
References: http://archives.neohapsis.com/archives/linux/turbolinux/2001-q1/0004.html, http://www.calderasystems.com/support/security/advisories/CSSA-2001-007.0.txt, http://www.debian.org/security/2001/dsa-039
CVE-2001-0276
ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments, which produces an error message that contains the path.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: badblue
References: http://marc.info/?l=bugtraq&m=98263019502565&w=2, http://www.badblue.com/p010219.htm, http://www.securityfocus.com/bid/2390
CVE-2001-1169
keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: s_key
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html, http://archives.neohapsis.com/archives/bugtraq/2001-08/0441.html
CVE-2001-0520
Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: esafe_gateway
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0284.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6580, http://archives.neohapsis.com/archives/bugtraq/2001-05/0284.html
CVE-2001-1370
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phplib
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410, http://marc.info/?l=bugtraq&m=99616122712122&w=2
CVE-2001-1510
Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to the requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://online.securityfocus.com/archive/1/242843/2002-07-27/2002-08-02/2, http://online.securityfocus.com/archive/1/243203, http://www.iss.net/security_center/static/7623.php
CVE-2001-0257
Buffer overflow in Easycom/Safecom Print Server Web service, version 404.590 and earlier, allows remote attackers to execute arbitrary commands via (1) a long URL or (2) a long HTTP header field such as "Host:".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easycom_safecom_print_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0375.html, http://www.securityfocus.com/bid/2291, https://exchange.xforce.ibmcloud.com/vulnerabilities/5988
CVE-2001-0137
Windows Media Player 7 allows remote attackers to execute malicious Java applets in Internet Explorer clients by enclosing the applet in a skin file named skin.wmz, then referencing that skin in the codebase parameter to an applet tag, aka the Windows Media Player Skins File Download" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://marc.info/?l=bugtraq&m=97958100816503&w=2, http://www.securityfocus.com/bid/2203, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-010
CVE-2001-1254
Web Access component for COM2001 Alexis 2.0 and 2.1 in InternetPBX sends username and voice mail passwords in the clear via a Java applet that sends the information to port 8888 of the server, which could allow remote attackers to steal the passwords via sniffing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: alexis_server
References: http://online.securityfocus.com/archive/1/217200, http://www.securityfocus.com/bid/3373, http://online.securityfocus.com/archive/1/217200
CVE-2001-0101
Vulnerability in fetchmail 5.5.0-2 and earlier in the AUTHENTICATE GSSAPI command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fetchmail
References: http://www.redhat.com/support/errata/RHBA-2000-106.html, http://www.turbolinux.com/pipermail/tl-security-announce/2000-December/000027.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7455
CVE-2001-1553
Buffer overflow in setiathome for SETI@home 3.03, if installed setuid, could allow local users to execute arbitrary code via long command line options (1) socks_server, (2) socks_user, and (3) socks_passwd. NOTE: since the default configuration of setiathome is not setuid, perhaps this issue should not be included in CVE.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: seti_at_home
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0662.html, http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0662.html
CVE-2001-0969
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:53.ipfw.asc, http://www.osvdb.org/1937, http://www.securityfocus.com/bid/3206
CVE-2001-0290
Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html
CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openlinux_workstation, openlinux_server
References: http://www.calderasystems.com/support/security/advisories/CSSA-2001-026.0.txt, http://www.securityfocus.com/bid/3052, https://exchange.xforce.ibmcloud.com/vulnerabilities/6854
CVE-2001-0598
Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_ghost
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0175.html, http://www.securityfocus.com/bid/2570, https://exchange.xforce.ibmcloud.com/vulnerabilities/6357
CVE-2001-1479
smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: management\+center
References: http://www.securiteam.com/unixfocus/6K00S203FC.html, http://www.securityfocus.com/bid/3763, https://exchange.xforce.ibmcloud.com/vulnerabilities/7756
CVE-2001-0456
postinst installation script for Proftpd in Debian 2.2 does not properly change the "run as uid/gid root" configuration when the user enables anonymous access, which causes the server to run at a higher privilege than intended.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://www.debian.org/security/2001/dsa-032, https://exchange.xforce.ibmcloud.com/vulnerabilities/6208, http://www.debian.org/security/2001/dsa-032
CVE-2001-0243
Windows Media Player 7 and earlier stores Internet shortcuts in a user's Temporary Files folder with a fixed filename instead of in the Internet Explorer cache, which causes the HTML in those shortcuts to run in the Local Computer Zone instead of the Internet Zone, which allows remote attackers to read certain files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_media_player
References: http://www.securityfocus.com/bid/2765, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-029, https://exchange.xforce.ibmcloud.com/vulnerabilities/6584
CVE-2001-1476
SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
References: http://www.kb.cert.org/vuls/id/565052, https://exchange.xforce.ibmcloud.com/vulnerabilities/6490, http://www.kb.cert.org/vuls/id/565052
CVE-2001-1573
Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interscan_viruswall
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00407.html, http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00407.html
CVE-2001-1586
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: simpleserver_www
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://seclists.org/bugtraq/2001/Jul/660, http://www.analogx.com/contents/download/network/sswww.htm, http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html
CWE: CWE-22
CVE-2001-0608
HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mpe
References: http://archives.neohapsis.com/archives/hp/2001-q1/0087.html, http://www.kb.cert.org/vuls/id/895496, https://exchange.xforce.ibmcloud.com/vulnerabilities/6951
CVE-2001-1027
Buffer overflow in WindowMaker (aka wmaker) 0.64 and earlier allows remote attackers to execute arbitrary code via a long window title.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windowmaker
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000411, http://www.debian.org/security/2001/dsa-074, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-074.php3
CVE-2001-0044
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: markvision
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0064.html, http://www.securityfocus.com/bid/2075, https://exchange.xforce.ibmcloud.com/vulnerabilities/5651
CVE-2001-1216
Buffer overflow in PL/SQL Apache module in Oracle 9i Application Server allows remote attackers to execute arbitrary code via a long request for a help page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://otn.oracle.com/deploy/security/pdf/modplsql.pdf, http://www.iss.net/security_center/static/7727.php, http://www.kb.cert.org/vuls/id/500203
CVE-2001-0294
Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: typsoft_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html
CVE-2001-0095
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: sunos
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0313.html, http://www.osvdb.org/6024, https://exchange.xforce.ibmcloud.com/vulnerabilities/5788
CVE-2001-0218
Format string vulnerability in mars_nwe 0.99.pl19 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mars_nwe
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0456.html, http://archives.neohapsis.com/archives/freebsd/2001-02/0081.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6019
CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ssh
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html, http://www.securityfocus.com/bid/2222, http://www.ssh.com/products/ssh/patches/secureRPCvulnerability.html
CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4_proxy variable, which allows the user to generate false proxy responses and possibly gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kth_kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5733
CVE-2001-0298
Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webreflex
References: http://www.securityfocus.com/archive/1/165671, http://www.securityfocus.com/bid/2425, http://www.securityfocus.com/archive/1/165671
CVE-2001-1037
Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sn_5420_storage_router_firmware
References: http://www.cisco.com/warp/public/707/SN-kernel-pub.html, http://www.osvdb.org/1917, http://www.securityfocus.com/bid/3131
CVE-2001-0199
Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sedum
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0064.html, http://www.kb.cert.org/vuls/id/651994, http://www.osvdb.org/14797
CVE-2001-0321
opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6512, http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html
CVE-2001-0986
SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source code by directly calling sqlqhit.asp with a CiScope parameter set to (1) webinfo, (2) extended_fileinfo, (3) extended_webinfo, or (4) fileinfo.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: index_server
References: http://www.securityfocus.com/archive/1/214217, http://www.securityfocus.com/bid/3339, https://exchange.xforce.ibmcloud.com/vulnerabilities/7125
CVE-2001-1277
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: makewhatis
References: http://marc.info/?l=bugtraq&m=99227597227747&w=2, http://www.redhat.com/support/errata/RHSA-2001-072.html, https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=41805
CVE-2001-0528
Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: e-business_suite
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0044.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0223.html, http://www.securityfocus.com/bid/2694
CVE-2001-1185
Some AIO operations in FreeBSD 4.4 may be delayed until after a call to execve, which could allow a local user to overwrite memory of the new process and gain privileges.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://www.iss.net/security_center/static/7693.php, http://www.osvdb.org/2001, http://www.securityfocus.com/archive/1/244583
CVE-2001-1506
Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on some files beyond what is specified in the file system protection rules, which allows local users to conduct unauthorized operations on restricted files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_os
References: http://online.securityfocus.com/advisories/3618, http://www.securityfocus.com/bid/3468, https://exchange.xforce.ibmcloud.com/vulnerabilities/7342
CVE-2001-0562
a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: a1stats
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html, http://www.securityfocus.com/bid/2705, https://exchange.xforce.ibmcloud.com/vulnerabilities/6505
CVE-2001-0533
Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/services/continuity/recover1.nsf/advisories/85256A3400529A8685256A8D00804A37/%24file/oar271.txt, http://www.ciac.org/ciac/bulletins/l-123.shtml, http://www.osvdb.org/5585
CVE-2001-0413
BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which causes the router to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: x1000, x1200, x4000
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0145.html, http://marc.info/?l=bugtraq&m=98644414226344&w=2, http://marc.info/?l=bugtraq&m=98659862317070&w=2
CVE-2001-0153
Buffer overflow in VB-TSQL debugger object (vbsdicli.exe) in Visual Studio 6.0 Enterprise Edition allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: visual_studio, visual_basic
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://razor.bindview.com/publish/advisories/adv_vbtsql.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-018, http://razor.bindview.com/publish/advisories/adv_vbtsql.html
CWE: CWE-119
CVE-2001-0503
Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the "NetMeeting Desktop Sharing" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netmeeting
References: http://www.iss.net/security_center/static/5368.php, http://www.osvdb.org/5608, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-077
CVE-2001-0292
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html
CVE-2001-1043
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk (link) file that points to the target file.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftp_server
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://www.osvdb.org/1886, http://www.securityfocus.com/archive/1/194445, http://www.securityfocus.com/bid/2961
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: newsdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0460.html, http://sourceforge.net/forum/forum.php?forum_id=60570, https://exchange.xforce.ibmcloud.com/vulnerabilities/6010
CVE-2001-1212
Cross-site scripting vulnerability in catgy.cgi for Aktivate 1.03 allows remote attackers to execute arbitrary Javascript via the desc parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aktivate
References: http://www.iss.net/security_center/static/7717.php, http://www.securityfocus.com/archive/1/246274, http://www.securityfocus.com/bid/3714
CVE-2001-1267
Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tar
References: ftp://alpha.gnu.org/gnu/tar/tar-1.13.25.tar.gz, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000538, http://online.securityfocus.com/advisories/4514
CVE-2001-1269
Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via filenames in the archive that begin with the '/' (slash) character.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: unzip
References: http://online.securityfocus.com/archive/1/196445, http://sunsolve.sun.com/search/document.do?assetkey=1-26-47800-1, http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000928.1-1
CVE-2001-0326
Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i, application_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html, http://www.osvdb.org/5706, https://exchange.xforce.ibmcloud.com/vulnerabilities/6438
CVE-2001-1093
Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tru64
References: http://www.securityfocus.com/archive/1/213238, http://www.securityfocus.com/bid/3311, https://exchange.xforce.ibmcloud.com/vulnerabilities/7101
CVE-2001-1441
Cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: visualage_for_java
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html, http://www.kb.cert.org/vuls/id/270083, https://exchange.xforce.ibmcloud.com/vulnerabilities/6793
CVE-2001-0663
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://www.securityfocus.com/bid/3445, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-052, https://exchange.xforce.ibmcloud.com/vulnerabilities/7302
CVE-2001-0450
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: broker_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0533.html, http://www.ftp-broker.com/cgibin/Pageexe.exe?H=4143&P=0&C=0, https://exchange.xforce.ibmcloud.com/vulnerabilities/6189
CVE-2001-1100
sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: w3mail
References: http://www.securityfocus.com/archive/1/218921, http://www.securityfocus.com/bid/3673, http://www.w3mail.org/ChangeLog
CVE-2001-1003
Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file to decrypt the passwords and gain additional privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: respondus
References: http://marc.info/?l=bugtraq&m=99859557930285&w=2, http://marc.info/?l=bugtraq&m=99859557930285&w=2
CVE-2001-1240
The default configuration of sudo in Engarde Secure Linux 1.0.1 allows any user in the admin group to run certain commands that could be leveraged to gain full root access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux
References: http://www.linuxsecurity.com/advisories/other_advisory-1493.html, http://www.linuxsecurity.com/advisories/other_advisory-1493.html
CVE-2001-0892
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thttpd
Related CWEs: CWE-668
References: http://marc.info/?l=bugtraq&m=100568999726036&w=2, http://www.acme.com/software/thttpd/, http://marc.info/?l=bugtraq&m=100568999726036&w=2
CWE: CWE-668
CVE-2001-1478
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware, openunix
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.34/CSSA-2001-SCO.34.txt, http://www.securityfocus.com/bid/3555, https://exchange.xforce.ibmcloud.com/vulnerabilities/7573
CVE-2001-0178
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: suse_linux, mandrake_linux, mandrake_linux_corporate_server, openlinux_edesktop, linux
References: http://www.calderasystems.com/support/security/advisories/CSSA-2001-005.0.txt, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-018.php3?dis=7.2, http://www.novell.com/linux/security/advisories/2001_002_kdesu_txt.html
CVE-2001-1097
Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://marc.info/?l=bugtraq&m=99749327219189&w=2, http://www.securityfocus.com/archive/1/199558, http://www.securityfocus.com/bid/3096
CVE-2001-0686
Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0000.html, http://www.securityfocus.com/bid/2819, https://exchange.xforce.ibmcloud.com/vulnerabilities/6638
CVE-2001-1241
Un-CGI 1.9 and earlier does not verify that a CGI script has the execution bits set before executing it, which allows remote attackers to execute arbitrary commands by directing Un-CGI to a document that begins with "#!"  and the desired program name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: un-cgi
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0287.html, http://archives.neohapsis.com/archives/bugtraq/2001-07/0349.html, http://www.iss.net/security_center/static/6847.php
CVE-2001-0944
DDE in mIRC allows local users to launch applications under another user's account via a DDE message that executes a command, which may be executed by the other user's process.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mirc
References: http://marc.info/?l=bugtraq&m=100734173831990&w=2, http://marc.info/?l=bugtraq&m=100734173831990&w=2
CVE-2001-1371
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=101301813117562&w=2, http://technet.oracle.com/deploy/security/pdf/ias_soap_alert.pdf, http://www.cert.org/advisories/CA-2002-08.html
CWE: CWE-264
CVE-2001-1039
The JetAdmin web interface for HP JetDirect does not set a password for the telnet interface when the admin password is changed, which allows remote attackers to gain access to the printer.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jetadmin
References: http://www.securityfocus.com/archive/1/201160, http://www.securityfocus.com/bid/3132, http://www.securityfocus.com/archive/1/201160
CVE-2001-0151
IIS 5.0 allows remote attackers to cause a denial of service via a series of malformed WebDAV requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_services
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-016, https://exchange.xforce.ibmcloud.com/vulnerabilities/6205, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A90
CVE-2001-1576
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00404.html, http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00404.html
CVE-2001-0378
readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.8/common/024_readline.patch, http://www.osvdb.org/5680, https://exchange.xforce.ibmcloud.com/vulnerabilities/6586
CVE-2001-0669
Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard "%u" Unicode encoding of ASCII characters in the requested URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realsecure_server_sensor, secure_intrusion_detection_system, snort, dragon, realsecure_network_sensor
References: http://marc.info/?l=bugtraq&m=99972950200602&w=2, http://www.cisco.com/warp/public/707/cisco-intrusion-detection-obfuscation-vuln-pub.shtml, http://www.kb.cert.org/vuls/id/548515
CVE-2001-0679
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: interscan_viruswall
References: http://marc.info/?l=bugtraq&m=94204166130782&w=2, http://marc.info/?l=ntbugtraq&m=94208143007829&w=2, http://marc.info/?l=ntbugtraq&m=94216491202063&w=2
CVE-2001-1544
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://www.iss.net/security_center/static/7678.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=22290&Method=Full, http://www.securityfocus.com/bid/3666
CVE-2001-1521
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: postnuke
References: http://online.securityfocus.com/archive/1/245691, http://online.securityfocus.com/archive/82/243545, http://www.iss.net/security_center/static/7654.php
CVE-2001-0185
Netopia R9100 router version 4.6 allows authenticated users to cause a denial of service by using the router's telnet program to connect to the router's IP address, which causes a crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: r9100_router
References: http://www.securityfocus.com/archive/1/157952, http://www.securityfocus.com/bid/2287, https://exchange.xforce.ibmcloud.com/vulnerabilities/6001
CVE-2001-0091
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://www.osvdb.org/7820, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093, https://exchange.xforce.ibmcloud.com/vulnerabilities/6085
CVE-2001-0703
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: arcadia_internet_store
References: http://www.securityfocus.com/archive/1/192651, http://www.securityfocus.com/bid/2905, https://exchange.xforce.ibmcloud.com/vulnerabilities/6739
CVE-2001-0449
Buffer overflow in WinZip 8.0 allows attackers to execute arbitrary commands via a long file name that is processed by the /zipandemail command line option.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winzip
References: http://www.securityfocus.com/archive/1/166211, https://exchange.xforce.ibmcloud.com/vulnerabilities/6191, http://www.securityfocus.com/archive/1/166211
CVE-2001-0302
Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pi3web
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html, http://www.securityfocus.com/bid/2381, http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html
CVE-2001-0452
BRS WebWeaver FTP server before 0.64 Beta allows remote attackers to obtain the real pathname of the server via a "CD *" command followed by an ls command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webweaver
References: http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html, http://www.securityfocus.com/archive/1/180506, http://www.securityfocus.com/bid/2676
CVE-2001-1063
Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware, openunix
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.14/CSSA-2001-SCO.14.txt, http://www.securityfocus.com/bid/3244, https://exchange.xforce.ibmcloud.com/vulnerabilities/7036
CVE-2001-0696
NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: surgeftp
References: http://netwinsite.com/surgeftp/manual/updates.htm, http://www.securityfocus.com/archive/1/191916, http://www.securityfocus.com/bid/2891
CVE-2001-0129
Buffer overflow in Tinyproxy HTTP proxy 1.3.3 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long connect request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tinyproxy
References: http://marc.info/?l=bugtraq&m=97975486527750&w=2, http://www.debian.org/security/2001/dsa-018, http://www.securityfocus.com/bid/2217
CVE-2001-0196
inetd ident server in FreeBSD 4.x and earlier does not properly set group permissions, which allows remote attackers to read the first 16 bytes of files that are accessible by the wheel group.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:11.inetd.v1.1.asc, http://www.osvdb.org/1753, http://www.securityfocus.com/bid/2324
CVE-2001-1153
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openunix
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0391.html, http://www.iss.net/security_center/static/7041.php, http://www.securityfocus.com/bid/3248
CVE-2001-0306
Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webactive
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0332.html, http://www.securityfocus.com/bid/2386, http://archives.neohapsis.com/archives/bugtraq/2001-02/0332.html
CVE-2001-1012
Vulnerability in screen before 3.9.10, related to a multi-attach error, allows local users to gain root privileges when there is a subdirectory under /tmp/screens/.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/2001_030_screen_txt.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7134, http://www.novell.com/linux/security/advisories/2001_030_screen_txt.html
CVE-2001-0507
IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_services
References: http://online.securityfocus.com/archive/1/205069, http://www.ciac.org/ciac/bulletins/l-132.shtml, http://www.osvdb.org/5607