DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0746
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iplanet_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html, http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html, http://www.securityfocus.com/bid/2732
CVE-2001-0884
Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: mailman
References: http://www.redhat.com/support/errata/RHSA-2001-168.html, http://www.redhat.com/support/errata/RHSA-2001-169.html, http://www.redhat.com/support/errata/RHSA-2001-170.html
CVE-2001-1184
wrshdsp.exe in Denicomp Winsock RSHD/NT 2.21.00 and earlier allows remote attackers to cause a denial of service (CPU consumption) via (1) in 2.20.00 and earlier, an invalid port number such as a negative number, which causes a connection attempt to that port and all ports below 1024, and (2) in 2.21.00, a port number of 1024.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: winsock_rshd_nt
References: http://online.securityfocus.com/archive/1/245405, http://www.denicomp.com/rshdnt.htm, http://www.iss.net/security_center/static/7694.php
CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / (slash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino
References: http://marc.info/?l=bugtraq&m=100094373621813&w=2, http://www.securityfocus.com/bid/3350, https://exchange.xforce.ibmcloud.com/vulnerabilities/7180
CVE-2001-0181
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openlinux_eserver, openlinux_desktop, openlinux_edesktop
References: http://www.calderasystems.com/support/security/advisories/CSSA-2001-003.0.txt, http://www.securityfocus.com/bid/2215, https://exchange.xforce.ibmcloud.com/vulnerabilities/5953
CVE-2001-1458
Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences and a null character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise
References: http://online.securityfocus.com/archive/1/220667, http://support.novell.com/servlet/tidfinder/2960443, http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/advisories_template.htm%3Findexid%3D12
CVE-2001-1239
PowerNet IX allows remote attackers to cause a denial of service via a port scan.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: powernet_ix
References: http://www.securityfocus.com/bid/2992, http://www.securityfocus.com/bid/2992
CVE-2001-1480
Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sdk, jre, mac_os_runtime_for_java, jdk
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00120.html, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/208&type=0&nav=sec.sba, http://www.securityfocus.com/advisories/3617
CVE-2001-1582
Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://seclists.org/bugtraq/2001/Jul/0077.html, http://seclists.org/bugtraq/2001/Jul/0091.html, http://seclists.org/bugtraq/2001/Jun/0365.html
CWE: CWE-119
CVE-2001-0152
The password protection option for the Compressed Folders feature in Plus! for Windows 98 and Windows Me writes password information to a file, which allows local users to recover the passwords and read the compressed folders.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: plus
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-019, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-019
CVE-2001-0743
Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webboard
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0326.html, http://www.securityfocus.com/bid/2814, http://archives.neohapsis.com/archives/bugtraq/2001-05/0326.html
CVE-2001-0263
Gene6 G6 FTP Server 2.0 (aka BPFTP Server 2.10) allows attackers to read file attributes outside of the web root via the (1) SIZE and (2) MDTM commands when the "show relative paths" option is not enabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: g6_ftp_server
References: http://www.atstake.com/research/advisories/2001/a040301-1.txt, http://www.securityfocus.com/bid/2537, https://exchange.xforce.ibmcloud.com/vulnerabilities/6330
CVE-2001-1192
Citrix Independent Computing Architecture (ICA) Client for Windows 6.1 allows remote malicious web sites to execute arbitrary code via a .ICA file, which is downloaded and automatically executed by the client.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ica_client
References: http://www.securityfocus.com/archive/1/245342, http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3688, https://exchange.xforce.ibmcloud.com/vulnerabilities/7697
CVE-2001-1364
Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: autodns
References: ftp://ftp.earth.li/pub/projectpurple/autodns-0.0.4.tar.gz, http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html, ftp://ftp.earth.li/pub/projectpurple/autodns-0.0.4.tar.gz
CVE-2001-1086
XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: x11r6
References: http://online.securityfocus.com/archive/1/195008, http://www.securityfocus.com/archive/1/194907, http://www.securityfocus.com/bid/2985
CVE-2001-1102
Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: firewall-1
References: http://www.securityfocus.com/archive/1/212824, http://www.securityfocus.com/bid/3300, https://exchange.xforce.ibmcloud.com/vulnerabilities/7094
CVE-2001-0893
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mini_httpd
Related CWEs: CWE-668
References: http://marc.info/?l=bugtraq&m=100568999726036&w=2, http://www.acme.com/software/mini_httpd/, http://www.iss.net/security_center/static/7541.php
CWE: CWE-668
CVE-2001-0490
Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0518.html
CVE-2001-0179
Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web.xml file in the WEB-INF directory, via a malformed URL that contains a "."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jrun
References: http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full, https://exchange.xforce.ibmcloud.com/vulnerabilities/6008, http://www.allaire.com/handlers/index.cfm?ID=19546&Method=Full
CVE-2001-1319
Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service (hang) via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0391
Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xitami
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0277.html
CVE-2001-1542
NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webshield_smtp
References: http://archives.neohapsis.com/archives/bugtraq/2001-11/0294.html, http://www.iss.net/security_center/static/7637.php, http://www.securityfocus.com/bid/3601
CVE-2001-1191
WebSeal in IBM Tivoli SecureWay Policy Director 3.8 allows remote attackers to cause a denial of service (crash) via a URL that ends in %2e.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tivoli_secureway_policy_director
References: http://www.securityfocus.com/archive/1/245283, http://www.securityfocus.com/bid/3685, http://www.securityfocus.com/archive/1/245283
CVE-2001-0968
Knox Arkeia server 4.2, and possibly other versions, installs its root user with a null password by default, which allows local and remote users to gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arkeia
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html, http://www.securityfocus.com/bid/3203, http://archives.neohapsis.com/archives/bugtraq/2001-08/0228.html
CVE-2001-0755
Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0188.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0188.html
CVE-2001-1154
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bsd_os, cyrus_imap_server
References: http://www.securityfocus.com/archive/1/211056, http://www.securityfocus.com/bid/3260, https://exchange.xforce.ibmcloud.com/vulnerabilities/7053
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: speed_touch_home
References: http://www.cert.org/advisories/CA-2001-08.html, http://www.kb.cert.org/vuls/id/490344, http://www.securityfocus.com/archive/1/175229
CVE-2001-1202
Cross-site scripting vulnerability in DeleGate 7.7.0 and 7.7.1 does not quote scripting commands within a "403 Forbidden" error page, which allows remote attackers to execute arbitrary Javascript on other clients via a URL that generates an error.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: delegate
References: http://marc.info/?l=bugtraq&m=100956050432351&w=2, http://www.iss.net/security_center/static/7745.php, http://www.securityfocus.com/bid/3749
CVE-2001-1190
The default PAM files included with passwd in Mandrake Linux 8.1 do not support MD5 passwords, which could result in a lower level of password security than intended.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux
References: http://www.iss.net/security_center/static/7706.php, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-091.php3, http://www.securityfocus.com/bid/3683
CVE-2001-1017
rmuser utility in FreeBSD 4.2 and 4.3 creates a copy of the master.passwd file with world-readable permissions while updating the original file, which could allow local users to gain privileges by reading the copied file while rmuser is running, obtain the password hashes, and crack the passwords.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:59.rmuser.v1.1.asc, http://www.osvdb.org/1947, http://www.securityfocus.com/bid/3282
CVE-2001-0107
Veritas Backup agent on Linux allows remote attackers to cause a denial of service by establishing a connection without sending any data, which causes the process to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: backup
References: http://marc.info/?l=bugtraq&m=97958921407182&w=2, http://www.securityfocus.com/bid/2204, http://marc.info/?l=bugtraq&m=97958921407182&w=2
CVE-2001-1581
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailsweeper
References: http://www.mimesweeper.com/support/technotes/notes/1102.asp, https://exchange.xforce.ibmcloud.com/vulnerabilities/6801, http://www.mimesweeper.com/support/technotes/notes/1102.asp
CVE-2001-0184
eEye Iris 1.01 beta allows remote attackers to cause a denial of service via a malformed packet, which causes Iris to crash when a user views the packet.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: iris
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0343.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0352.html, http://www.securityfocus.com/bid/2278
CVE-2001-0440
Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux, licq, linux
References: http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3
CVE-2001-1494
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: messaging_storage_server, interactive_response, intuity_lx, util-linux, cvlan
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://seclists.org/bugtraq/2001/Dec/0122.html, http://seclists.org/bugtraq/2001/Dec/0123.html, http://secunia.com/advisories/16785
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-1041
oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace (.trc) file that is created in an alternate home directory identified by the ORACLE_HOME environment variable.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: database_server
References: http://marc.info/?l=bugtraq&m=100395579811880&w=2, http://marc.info/?l=bugtraq&m=99677282117387&w=2, http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf
CVE-2001-1180
FreeBSD 4.3 does not properly clear shared signal handlers when executing a process, which allows local users to gain privileges by calling rfork with a shared signal handler, having the child process execute a setuid program, and sending a signal to the child.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:42.signal.v1.1.asc, http://archives.neohapsis.com/archives/bugtraq/2001-07/0179.html, http://ciac.llnl.gov/ciac/bulletins/l-111.shtml
CVE-2001-0221
Buffer overflow in ja-xklock 2.7.1 and earlier allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ja-xklock
References: http://archives.neohapsis.com/archives/freebsd/2001-02/0079.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6073, http://archives.neohapsis.com/archives/freebsd/2001-02/0079.html
CVE-2001-0309
inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux
References: http://www.redhat.com/support/errata/RHSA-2001-006.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6380, http://www.redhat.com/support/errata/RHSA-2001-006.html
CVE-2001-0112
Multiple buffer overflows in splitvt before 1.6.5 allow local users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, splitvt
References: http://marc.info/?l=bugtraq&m=97958269320974&w=2, http://www.debian.org/security/2001/dsa-014, http://www.securityfocus.com/bid/2210
CVE-2001-0782
KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ktv
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0302.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6741, http://archives.neohapsis.com/archives/bugtraq/2001-06/0302.html
CVE-2001-0382
Computer Associates CCC\Harvest 5.0 for Windows NT/2000 uses weak encryption for passwords, which allows a remote attacker to gain privileges on the application.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ccc_harvest
References: http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html, http://archives.neohapsis.com/archives/ntbugtraq/2001-q2/0001.html
CVE-2001-1282
Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/3426
CVE-2001-0767
Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: guildftpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html, http://www.nitrolic.com/, http://www.securityfocus.com/bid/2789
CVE-2001-0053
One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd, openbsd, ftpd-bsd
References: ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-018.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2000-12/0275.html, http://www.openbsd.org/advisories/ftpd_replydirname.txt
CVE-2001-1551
Linux kernel 2.2.19 enables CAP_SYS_RESOURCE for setuid processes, which allows local users to exceed disk quota restrictions during execution of setuid programs.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html, http://archives.neohapsis.com/archives/bugtraq/2001-10/0179.html
CVE-2001-0623
sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendfile
References: http://www.debian.org/security/2001/dsa-050, http://www.debian.org/security/2001/dsa-052, https://exchange.xforce.ibmcloud.com/vulnerabilities/6430
CVE-2001-0824
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websphere_application_server
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html, http://www.securityfocus.com/bid/2969, http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html
CVE-2001-0895
Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router's interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_2950, catalyst_4908g-l3, catalyst_3500xl, catalyst_6000, catalyst_5000
References: http://www.cisco.com/warp/public/707/IOS-arp-overwrite-vuln-pub.shtml, http://www.kb.cert.org/vuls/id/399355, http://www.osvdb.org/807
CVE-2001-1049
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorecast
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://phorecast.org/, http://www.iss.net/security_center/static/7215.php
CVE-2001-0697
NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: surgeftp
References: http://netwinsite.com/surgeftp/manual/updates.htm, http://www.secadministrator.com/Articles/Index.cfm?ArticleID=20200, http://www.securityfocus.com/archive/1/165816
CVE-2001-1560
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_xp
References: http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2001-10/0066.html, http://www.iss.net/security_center/static/7409.php, http://www.securityfocus.com/bid/3481
CVE-2001-0213
Buffer overflow in pi program in PlanetIntra 2.5 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: planet_intra
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0421.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6002, http://archives.neohapsis.com/archives/bugtraq/2001-01/0421.html
CVE-2001-0386
AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: simpleserver_www
References: http://www.osvdb.org/3781, http://www.securityfocus.com/archive/1/177156, http://www.securityfocus.com/bid/2608
CVE-2001-0439
licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: licq, mandrake_linux, mandrake_linux_corporate_server, linux, freebsd
References: http://archives.neohapsis.com/archives/freebsd/2001-04/0607.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000389, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-032.php3
CVE-2001-0937
PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pgpmail.pl
References: http://marc.info/?l=bugtraq&m=100714269114686&w=2, http://www.securityfocus.com/archive/82/243262, http://marc.info/?l=bugtraq&m=100714269114686&w=2
CVE-2001-0197
Format string vulnerability in print_client in icecast 1.3.8beta2 and earlier allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: icecast, linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0348.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000374, http://www.redhat.com/support/errata/RHSA-2001-004.html
CVE-2001-0589
NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netscreen_screenos
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0375.html, http://www.osvdb.org/1780, http://www.securityfocus.com/bid/2523
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: speed_touch_home
References: http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html, http://www.cert.org/advisories/CA-2001-08.html, http://www.kb.cert.org/vuls/id/243592
CVE-2001-0022
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: simplestguest.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html, http://www.securityfocus.com/bid/2106, https://exchange.xforce.ibmcloud.com/vulnerabilities/5743
CVE-2001-0780
Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: directory_pro
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://www.securityfocus.com/archive/1/187182, http://www.securityfocus.com/bid/2793, http://www.securityfocus.com/archive/1/187182
CWE: CWE-22
CVE-2001-1031
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: meteor_ftpd
References: http://207.202.218.172/, http://archives.neohapsis.com/archives/bugtraq/2001-09/0231.html, http://www.securityfocus.com/bid/3374
CVE-2001-1105
RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icdn, bsafe_ssl-j
References: http://www.ciac.org/ciac/bulletins/l-141.shtml, http://www.cisco.com/warp/public/707/SSL-J-pub.html, http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html
CVE-2001-1354
NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: surgeftp, dmail
References: http://online.securityfocus.com/archive/1/198293, http://www.securityfocus.com/bid/3075, https://exchange.xforce.ibmcloud.com/vulnerabilities/6866
CVE-2001-0683
Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5K of data to TCP port 5238.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: collabra_server
References: http://www.securityfocus.com/archive/1/165516, https://exchange.xforce.ibmcloud.com/vulnerabilities/6158, http://www.securityfocus.com/archive/1/165516
CVE-2001-0887
xSANE 0.81 and earlier allows local users to modify files of other xSANE users via a symlink attack on temporary files.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: xsane
References: http://rhn.redhat.com/errata/RHSA-2001-171.html, http://www.redhat.com/support/errata/RHSA-2001-172.html, http://www.securityfocus.com/advisories/3734
CVE-2001-0856
Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 4758
References: http://marc.info/?l=bugtraq&m=100533053219673&w=2, http://www.cl.cam.ac.uk/~rnc1/descrack/, http://www.cl.cam.ac.uk/~rnc1/descrack/attack.html
CVE-2001-1141
The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openssl, ssleay
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0
CVE-2001-1171
Check Point Firewall-1 3.0b through 4.0 SP1 follows symlinks and creates a world-writable temporary .cpp file when compiling Policy rules, which could allow local users to gain privileges or modify the firewall policy.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html, http://archives.neohapsis.com/archives/bugtraq/2001-09/0046.html
CVE-2001-0534
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: radius
References: http://www.kb.cert.org/vuls/id/898931, http://www.securityfocus.com/bid/2989, http://xforce.iss.net/alerts/alerts.php
CVE-2001-1157
Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: websweeper
References: http://www.securityfocus.com/archive/1/203821, http://www.securityfocus.com/bid/3172, http://www.securityfocus.com/bid/3173
CVE-2001-1067
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aol_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html, http://www.securityfocus.com/archive/1/213041, http://www.securityfocus.com/bid/3230
CVE-2001-0097
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: infinite_interchange
References: http://www.securityfocus.com/archive/1/152403, http://www.securityfocus.com/bid/2140, https://exchange.xforce.ibmcloud.com/vulnerabilities/5798
CVE-2001-0571
Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: im_message_inspector, im_anti_virus
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0382.html, http://marc.info/?l=bugtraq&m=98538867727489&w=2, http://marc.info/?l=bugtraq&m=98567864203963&w=2
CVE-2001-1516
Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpreview
References: http://www.iss.net/security_center/static/7218.php, http://www.securityfocus.com/bid/3380, http://www.iss.net/security_center/static/7218.php
CVE-2001-0660
Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: exchange_server
References: http://support.microsoft.com/support/kb/articles/Q307/1/95.ASP, http://www.securityfocus.com/bid/3301, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-047
CVE-2001-1362
Vulnerability in the server for nPULSE before 0.53p4.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: npulse
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html, http://freshmeat.net/releases/51981/, http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html
CVE-2001-0048
The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/2133, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-099, http://www.securityfocus.com/bid/2133
CVE-2001-1178
Buffer overflow in xman allows local users to gain privileges via a long MANPATH environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x11r6
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0234.html, http://www.securityfocus.com/bid/3030, https://exchange.xforce.ibmcloud.com/vulnerabilities/6853
CVE-2001-0466
Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ustorekeeper_online_shopping_system
References: http://marc.info/?l=bugtraq&m=98633176230748&w=2, http://marc.info/?l=bugtraq&m=98633176230748&w=2
CVE-2001-1140
BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: badblue
References: http://www.securityfocus.com/archive/1/209545, http://www.securityfocus.com/bid/3222, https://exchange.xforce.ibmcloud.com/vulnerabilities/7021
CVE-2001-1406
process_bug.cgi in Bugzilla before 2.14 does not set the "groupset" bit when a bug is moved between product groups, which will cause the bug to have the old group's restrictions, which might not be as stringent.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=66235, http://marc.info/?l=bugtraq&m=99912899900567, http://www.iss.net/security_center/static/10478.php
CVE-2001-0699
Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://www.securityfocus.com/archive/1/192299, http://www.securityfocus.com/bid/2893, https://exchange.xforce.ibmcloud.com/vulnerabilities/6726
CVE-2001-0353
Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206, http://www.cert.org/advisories/CA-2001-15.html, http://www.securityfocus.com/bid/2894
CVE-2001-1584
CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cardboard
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.securiteam.com/unixfocus/5MP0M2K5FC.html, http://www.securityfocus.com/bid/3360, https://exchange.xforce.ibmcloud.com/vulnerabilities/7178
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2001-0631
Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: firstclass
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0376.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0440.html, http://www.securityfocus.com/bid/2423
CVE-2001-1386
WFTPD 3.00 allows remote attackers to read arbitrary files by uploading a (link) file that ends in a ".lnk." extension, which bypasses WFTPD's check for a ".lnk" extension.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wftpd
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://www.securityfocus.com/archive/1/194442, http://www.securityfocus.com/bid/2957, https://exchange.xforce.ibmcloud.com/vulnerabilities/6760
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-0513
Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oracle9i
References: http://www.kb.cert.org/vuls/id/105259, http://www.osvdb.org/5600, http://xforce.iss.net/alerts/advise81.php
CVE-2001-1261
Avaya Argent Office 2.1 may allow remote attackers to change hold music by spoofing a legitimate server's response to a TFTP broadcast and providing an alternate HoldMusic file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: argent_office
References: http://online.securityfocus.com/archive/1/202344, http://www.iss.net/security_center/static/6956.php, http://online.securityfocus.com/archive/1/202344
CVE-2001-0305
Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: es.one
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0324.html, http://www.securityfocus.com/bid/2385, http://archives.neohapsis.com/archives/bugtraq/2001-02/0324.html
CVE-2001-0572
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh, openssh
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391, http://www.kb.cert.org/vuls/id/596827
CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: soho_firmware, soho
References: http://www.securityfocus.com/archive/1/199632, http://www.securityfocus.com/bid/3098, http://www.securityfocus.com/archive/1/199632
CVE-2001-0721
Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_me, windows_xp, windows_98se, windows_98
References: http://marc.info/?l=bugtraq&m=100467787323377&w=2, http://marc.info/?l=bugtraq&m=100528449024158&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-054
CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: kth_kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html, http://www.redhat.com/support/errata/RHSA-2001-025.html
CVE-2001-1324
cvmlogin and statfile in Paul Jarc idtools before 2001.06.27 do not properly check the return value of a call to the pathexec_env function, which could cause the setstate utility to setuid to the UID environment variable and allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: idtools
References: http://multivac.cwru.edu/idtools/admin_idtools.tar.bz2, http://securitytracker.com/id?1001839, http://www.securityfocus.com/bid/2934
CVE-2001-0823
The pmpost program in Performance Co-Pilot (PCP) before 2.2.1-3 allows a local user to gain privileges via a symlink attack on the NOTICES file in the PCP log directory (PCP_LOG_DIR).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: performance_co-pilot
References: ftp://patches.sgi.com/support/free/security/advisories/20010601-01-A, http://archives.neohapsis.com/archives/bugtraq/2001-06/0245.html, http://marc.info/?l=bugtraq&m=99290754901708&w=2
CVE-2001-0457
man2html before 1.5-22 allows remote attackers to cause a denial of service (memory exhaustion).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux
References: http://www.debian.org/security/2001/dsa-035, http://www.osvdb.org/5631, https://exchange.xforce.ibmcloud.com/vulnerabilities/6211
CVE-2001-1259
Avaya Argent Office allows remote attackers to cause a denial of service by sending UDP packets to port 53 with no payload.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: argent_office
References: http://online.securityfocus.com/archive/1/202344, http://www.iss.net/security_center/static/6953.php, http://online.securityfocus.com/archive/1/202344
CVE-2001-1402
Bugzilla before 2.14 does not properly escape untrusted parameters, which could allow remote attackers to conduct unauthorized activities via cross-site scripting (CSS) and possibly SQL injection attacks on (1) the product or output form variables for reports.cgi, (2) the voteon, bug_id, and user variables for showvotes.cgi, (3) an invalid email address in createaccount.cgi, (4) an invalid ID in showdependencytree.cgi, (5) invalid usernames and other fields in process_bug.cgi, and (6) error messages in buglist.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=38854, http://bugzilla.mozilla.org/show_bug.cgi?id=38855, http://bugzilla.mozilla.org/show_bug.cgi?id=38859