DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1247
PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: php
Related CWEs: CWE-264
References: http://online.securityfocus.com/archive/1/194425, http://www.osvdb.org/5440, http://www.php.net/do_download.php?download_file=php-4.1.2.tar.gz
CWE: CWE-264
CVE-2001-0166
Macromedia Shockwave Flash plugin version 8 and earlier allows remote attackers to cause a denial of service via malformed tag length specifiers in a SWF file.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: shockwave_flash_plugin
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0491.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5826, http://archives.neohapsis.com/archives/bugtraq/2000-12/0491.html
CVE-2001-1457
Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: crazywwwboard
References: http://www.kb.cert.org/vuls/id/229955, http://www.securityfocus.com/archive/1/173050, https://exchange.xforce.ibmcloud.com/vulnerabilities/10110
CVE-2001-0524
eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: securells
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6574
CVE-2001-1438
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: visor, palm_os
References: http://www.kb.cert.org/vuls/id/222739, http://www.securityfocus.com/archive/82/222110, https://exchange.xforce.ibmcloud.com/vulnerabilities/10637
CVE-2001-1287
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0083.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/3431
CVE-2001-0131
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 3.3 (LOW)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P
Affected Products: debian_linux, http_server
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.debian.org/security/2001/dsa-021, http://www.securityfocus.com/bid/2182
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-0826
Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cesarftp
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html, http://www.securityfocus.com/archive/1/20010630093621.66913.qmail%40web13002.mail.yahoo.com, http://www.securityfocus.com/bid/2972
CVE-2001-1011
index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mambo_site_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html, http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz, http://www.osvdb.org/1911
CVE-2001-0990
Inter7 vpopmail 4.10.35 and earlier, when using the MySQL module, compiles authentication information in cleartext into the libvpopmail.a library, which allows local users to obtain the MySQL username and password by inspecting the vpopmail programs that use the library.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpopmail
References: http://www.inter7.com/vpopmail/ChangeLog, http://www.securityfocus.com/archive/1/212036, http://www.securityfocus.com/bid/3284
CVE-2001-0224
Muscat Empower CGI program allows remote attackers to obtain the absolute pathname of the server via an invalid request in the DB parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: muscat_empower
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0216.html, http://www.securityfocus.com/bid/2374, https://exchange.xforce.ibmcloud.com/vulnerabilities/6093
CVE-2001-0086
CGI Script Center Subscribe Me LITE 2.0 and earlier allows remote attackers to delete arbitrary mailing list users without authentication by directly calling subscribe.pl with the target address as a parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: subscribe_me_lite
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0160.html, http://www.securityfocus.com/bid/2108, https://exchange.xforce.ibmcloud.com/vulnerabilities/5735
CVE-2001-1332
Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cups
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386, http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html
CVE-2001-0950
ValiCert Enterprise Validation Authority (EVA) Administration Server 3.3 through 4.2.1 uses insufficiently random data to (1) generate session tokens for HSMs using the C rand function, or (2) generate certificates or keys using /dev/urandom instead of another source which blocks when the entropy pool is low, which could make it easier for local or remote attackers to steal tokens or certificates via brute force guessing.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_validation_authority
Related CWEs: CWE-331
Related CAPECs: CAPEC-59
References: http://marc.info/?l=bugtraq&m=100749428517090&w=2, http://www.securityfocus.com/bid/3618, http://www.securityfocus.com/bid/3620
CWE: CWE-331
CVE-2001-1378
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: fetchmail
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html, http://www.redhat.com/support/errata/RHSA-2001-103.html, http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2001-1119
cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: xmcd
References: http://www.kb.cert.org/vuls/id/105347, http://www.novell.com/linux/security/advisories/2001_025_xmcd_txt.html, http://www.securityfocus.com/bid/3148
CVE-2001-0448
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 602pro_lan_suite
References: http://www.securityfocus.com/archive/1/171418, http://www.securityfocus.com/archive/1/171418
CVE-2001-1131
Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: slimftpd
References: http://www.securiteam.com/windowsntfocus/5RP0L0055O.html, http://www.securiteam.com/windowsntfocus/5RP0L0055O.html
CVE-2001-1085
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: lmail
References: http://www.securityfocus.com/archive/1/195022, http://www.securityfocus.com/bid/2984, https://exchange.xforce.ibmcloud.com/vulnerabilities/6809
CVE-2001-1461
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: securid
References: http://www.kb.cert.org/vuls/id/348040, http://www.securityfocus.com/bid/3461, https://exchange.xforce.ibmcloud.com/vulnerabilities/7397
CVE-2001-0392
Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long string to the server port (2407), which causes the server to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: financials_server
References: http://marc.info/?l=bugtraq&m=98633100728473&w=2, http://www.securityfocus.com/bid/2539, http://marc.info/?l=bugtraq&m=98633100728473&w=2
CVE-2001-0350
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031, https://exchange.xforce.ibmcloud.com/vulnerabilities/6664, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031
CVE-2001-0518
Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oracle9i
References: http://otn.oracle.com/deploy/security/alerts.htm, http://xforce.iss.net/alerts/advise82.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/6716
CVE-2001-0284
Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a malformed Authentication header (AH) IPv4 option.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
References: http://www.openbsd.org/errata.html#ipsec_ah, http://www.osvdb.org/6026, http://www.openbsd.org/errata.html#ipsec_ah
CVE-2001-0941
Buffer overflow in dbsnmp in Oracle 8.0.6 through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: database_server
References: http://marc.info/?l=bugtraq&m=100716693806967&w=2, http://otn.oracle.com/deploy/security/pdf/dbsmp_alert.pdf, http://www.securityfocus.com/bid/3138
CVE-2001-0013
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bind
References: http://www.cert.org/advisories/CA-2001-02.html, http://www.nai.com/research/covert/advisories/047.asp, http://www.redhat.com/support/errata/RHSA-2001-007.html
CVE-2001-0340
An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exchange_server
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://www.ciac.org/ciac/bulletins/l-091.shtml, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030, https://exchange.xforce.ibmcloud.com/vulnerabilities/6652
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2001-0724
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.osvdb.org/5556, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-055, https://exchange.xforce.ibmcloud.com/vulnerabilities/8471
CVE-2001-0577
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0410.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6289
CVE-2001-0412
Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: content_services_switch_11150, content_services_switch_11050, content_services_switch_11800
References: http://www.cisco.com/warp/public/707/arrowpoint-useraccnt-debug-pub.shtml, http://www.osvdb.org/1784, http://www.securityfocus.com/bid/2559
CVE-2001-0588
sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0417.html
CVE-2001-0947
Forms.exe CGI program in ValiCert Enterprise Validation Authority (EVA) 3.3 through 4.2.1 allows remote attackers to determine the real pathname of the server by requesting an invalid extension, which produces an error page that includes the path.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_validation_authority
References: http://marc.info/?l=bugtraq&m=100749428517090&w=2, http://www.securityfocus.com/bid/3615, http://www.valicert.com/support/security_advisory_eva.html
CVE-2001-0470
Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0160.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0181.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6239
CVE-2001-0396
The pre-login mode in the System Administrator interface of Lightwave ConsoleServer 3200 allows remote attackers to obtain sensitive information such as system status, configuration, and users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: consoleserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html, http://www.securityfocus.com/bid/2578, http://archives.neohapsis.com/archives/bugtraq/2001-04/0170.html
CVE-2001-1358
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpmychat
References: http://www.phpheaven.net/projects/phpMyChat/changes.php3, http://www.phpheaven.net/projects/phpMyChat/changes.php3
CVE-2001-0759
Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bestcrypt
References: http://www.securityfocus.com/archive/1/191111, http://www.securityfocus.com/bid/2875, http://www.securityfocus.com/archive/1/191111
CVE-2001-0776
Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dynfx_mailserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0278.html, http://www.securityfocus.com/bid/2781, https://exchange.xforce.ibmcloud.com/vulnerabilities/6615
CVE-2001-1321
Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_directory
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0946
apmscript in Apmd in Red Hat 7.2 "Enigma" allows local users to create or change the modification dates of arbitrary files via a symlink attack on the LOW_POWER temporary file, which could be used to cause a denial of service, e.g. by creating /etc/nologin and disabling logins.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=100743394701962&w=2, http://www.osvdb.org/5493, https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=56389
CVE-2001-0722
Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=100527618108521&w=2, http://www.ciac.org/ciac/bulletins/m-016.shtml, http://www.osvdb.org/1982
CVE-2001-0162
WinCE 3.0.9348 generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_embedded_compact
References: http://www.cs.jhu.edu/~seny/pubs/wince802.pdf, http://www.cs.jhu.edu/~seny/pubs/wince802.pdf
CVE-2001-0987
Cross-site scripting vulnerability in CGIWrap before 3.7 allows remote attackers to execute arbitrary Javascript on other web clients by causing the Javascript to be inserted into error messages that are generated by CGIWrap.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cgiwrap
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0499.html, http://cgiwrap.sourceforge.net/changes.html, http://www.osvdb.org/1909
CVE-2001-0364
SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ssh2
References: http://marc.info/?l=bugtraq&m=98467799732241&w=2, http://www.securityfocus.com/bid/2477, https://exchange.xforce.ibmcloud.com/vulnerabilities/6241
CVE-2001-0190
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=97983943716311&w=2, http://marc.info/?l=bugtraq&m=98028642319440&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6224
CVE-2001-0647
Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: orange_web_server
References: http://www.securityfocus.com/archive/1/165658, http://www.securityfocus.com/bid/2432, http://www.securityfocus.com/archive/1/165658
CVE-2001-1539
Stack consumption vulnerability in Internet Explorer The JavaScript settimeout function in Internet Explorer allows remote attackers to cause a denial of service (crash) via the JavaScript settimeout function.  NOTE: the vendor could not reproduce the problem.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0008.html, http://archives.neohapsis.com/archives/bugtraq/2001-12/0034.html, http://www.iss.net/security_center/static/7661.php
CWE: CWE-119
CVE-2001-0635
Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.osvdb.org/5564, http://www.redhat.com/support/errata/RHSA-2001-058.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6493
CVE-2001-0745
Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: messanger
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0014.html, http://www.osvdb.org/5543, https://exchange.xforce.ibmcloud.com/vulnerabilities/7417
CVE-2001-0626
O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a ":" character.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: website_professional
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0236.html, http://www.securityfocus.com/bid/2488, https://exchange.xforce.ibmcloud.com/vulnerabilities/3839
CVE-2001-0515
Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oracle8i, database_server
References: http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf, http://xforce.iss.net/alerts/advise82.php, http://otn.oracle.com/deploy/security/pdf/net8_dos_alert.pdf
CVE-2001-0715
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to obtain potentially sensitive information about the mail queue by setting debugging flags to enable debug mode.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sendmail
References: ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I, http://razor.bindview.com/publish/advisories/adv_sm812.html, ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I
CVE-2001-0784
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot)  attack using encoded URL characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: icecast
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0353.html, http://www.debian.org/security/2001/dsa-089, http://www.osvdb.org/1883
CVE-2001-0272
Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sendtemp.pl
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html
CVE-2001-0582
Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: crushftp_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0036.html, http://www.kb.cert.org/vuls/id/110803, https://exchange.xforce.ibmcloud.com/vulnerabilities/6495
CVE-2001-1355
Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: surgeftp, dmail
References: http://online.securityfocus.com/archive/1/198293, http://www.securityfocus.com/bid/3077, https://exchange.xforce.ibmcloud.com/vulnerabilities/6865
CVE-2001-1244
Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small number and requesting large amounts of data, which generates more packets with less TCP-level data that amplify network traffic and consume more server CPU to process.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, hp-ux, openbsd, freebsd, vvos
References: http://www.securityfocus.com/archive/1/195457, http://www.securityfocus.com/bid/2997, https://exchange.xforce.ibmcloud.com/vulnerabilities/6824
CVE-2001-0848
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fuse_talk
References: http://marc.info/?l=bugtraq&m=100463832209281&w=2, http://www.iss.net/security_center/static/7445.php, http://www.securityfocus.com/bid/3496
CVE-2001-1107
SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pvs
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html, http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html, http://www.securityfocus.com/bid/3101
CVE-2001-1129
Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: progress
References: http://www.securityfocus.com/archive/1/224395, http://www.securityfocus.com/bid/3502, https://exchange.xforce.ibmcloud.com/vulnerabilities/7457
CVE-2001-0865
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.osvdb.org/1988
CVE-2001-0002
Internet Explorer 5.5 and earlier allows remote attackers to obtain the physical location of cached content and open the content in the Local Computer Zone, then use compiled HTML help (.chm) files to execute arbitrary programs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_script_host, internet_explorer
References: http://www.guninski.com/chmtempmain.html, http://www.osvdb.org/7823, http://www.securityfocus.com/bid/2456
CVE-2001-1158
Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html, http://ciac.llnl.gov/ciac/bulletins/l-109.shtml, http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1
CVE-2001-1450
Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./".
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://cert.uni-stuttgart.de/archive/vuln-dev/2001/05/msg00029.html, http://www.kb.cert.org/vuls/id/199408, https://exchange.xforce.ibmcloud.com/vulnerabilities/10117
CVE-2001-1533
Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service via a flood of fragmented UDP packets.  NOTE: the vendor disputes this issue, saying that it requires high bandwidth to exploit, and the server does not experience any instability.  Therefore this "laws of physics" issue might not be included in CVE
CVSS v3.1 Score: 5.3 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: isa_server
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00018.html, http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00031.html, http://www.iss.net/security_center/static/7446.php
CVE-2001-0768
GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: guildftpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0250.html, http://www.securityfocus.com/bid/2792, https://exchange.xforce.ibmcloud.com/vulnerabilities/6611
CVE-2001-0143
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: immunix, linux
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-011.php3, http://www.securityfocus.com/bid/2186
CVE-2001-0557
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jana_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html, http://www.kb.cert.org/vuls/id/132099, http://www.securityfocus.com/bid/2703
CVE-2001-0399
Caucho Resin 1.3b1 and earlier allows remote attackers to read source code for Javabean files by inserting a .jsp before the WEB-INF specifier in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://marc.info/?l=bugtraq&m=98633597813833&w=2, http://www.securityfocus.com/bid/2533, http://marc.info/?l=bugtraq&m=98633597813833&w=2
CVE-2001-1064
Cisco 600 series routers running CBOS 2.0.1 through 2.4.2ap allows remote attackers to cause a denial of service via multiple connections to the router on the (1) HTTP or (2) telnet service, which causes the router to become unresponsive and stop forwarding packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cbos
References: http://www.cisco.com/warp/public/707/cisco-cbos-webserver-pub.shtml, http://www.securityfocus.com/bid/3236, https://exchange.xforce.ibmcloud.com/vulnerabilities/7025
CVE-2001-0597
Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack.  This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: strip
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0169.html, http://www.securityfocus.com/bid/2567, https://exchange.xforce.ibmcloud.com/vulnerabilities/6362
CVE-2001-0624
QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: qnx
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6437, http://archives.neohapsis.com/archives/vuln-dev/2001-q2/0266.html
CVE-2001-0443
Buffer overflow in QPC QVT/Net Popd 4.20 in QVT/Net 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via (1) a long username, or (2) a long password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qvt_net, qvt_term_plus
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0227.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0227.html
CVE-2001-1501
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: proftpd
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000450, http://online.securityfocus.com/archive/1/169395, http://www.mandriva.com/security/advisories?name=MDKSA-2002:005
CVE-2001-0280
Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mercur
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0413.html, http://www.osvdb.org/6027, https://exchange.xforce.ibmcloud.com/vulnerabilities/6149
CVE-2001-0369
Buffer overflow in lpsched on DGUX version R4.20MU06 and MU02 allows a local attacker to obtain root access via a long command line argument (non-existent printer name).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix
References: http://marc.info/?l=bugtraq&m=98511407131984&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6258, http://marc.info/?l=bugtraq&m=98511407131984&w=2
CVE-2001-0409
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vim
References: http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt, http://www.novell.com/linux/security/advisories/2001_012_vim.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6628
CVE-2001-1026
Trend Micro InterScan AppletTrap 2.0 does not properly filter URLs when they are modified in certain ways such as (1) using a double slash (//) instead of a single slash, (2) URL-encoded characters, (3) requesting the IP address instead of the domain name, or (4) using a leading 0 in an octet of an IP address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interscan_applettrap
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0129.html, http://www.securityfocus.com/bid/2996, http://www.securityfocus.com/bid/2998
CVE-2001-0719
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://online.securityfocus.com/archive/1/202470, http://www.iss.net/security_center/static/6962.php, http://www.osvdb.org/5558
CVE-2001-1111
EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eftp
References: http://www.securityfocus.com/archive/1/213647, http://www.securityfocus.com/bid/3332, https://exchange.xforce.ibmcloud.com/vulnerabilities/7116
CVE-2001-0001
cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6183, http://archives.neohapsis.com/archives/bugtraq/2001-02/0257.html
CVE-2001-1536
Autogalaxy stores usernames and passwords in cleartext in cookies, which makes it easier for remote attackers to obtain authentication information and gain unauthorized access via sniffing or a cross-site scripting attack.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: audiogalaxy
Related CWEs: CWE-312
Related CAPECs: CAPEC-37
MITRE ATT&CK Techniques: T1005, T1552.004
MITRE ATT&CK Tactics: T1552
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-11/0225.html, http://www.iss.net/security_center/static/7621.php, http://www.securityfocus.com/bid/3587
CWE: CWE-312
MITRE ATT&CK techniques: T1005, T1552.004
MITRE ATT&CK tactics: T1552
CVE-2001-1555
pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://securitytracker.com/id?1002732, http://securitytracker.com/id?1004035, http://sunsolve.sun.com/search/document.do?assetkey=1-26-43929-1
CVE-2001-0688
Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD ("CD . .") command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: broker_ftp_server
References: http://www.securityfocus.com/archive/1/190032, http://www.securityfocus.com/bid/2851, http://www.securityfocus.com/archive/1/190032
CVE-2001-0027
mod_sqlpw module in ProFTPD does not reset a cached password when a user uses the "user" command to change accounts, which allows authenticated attackers to gain privileges of other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proftpd
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5737, http://archives.neohapsis.com/archives/bugtraq/2000-12/0139.html
CVE-2001-0875
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/archive/1/245594, http://www.securityfocus.com/bid/3597, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-058
CVE-2001-0426
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0203.html
CVE-2001-1274
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000375, http://marc.info/?l=bugtraq&m=98089552030459&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2001-006.0.txt
CVE-2001-0289
Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: joe
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html, http://www.debian.org/security/2001/dsa-041, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3
CVE-2001-1312
Format string vulnerabilities in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino_r5
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-1578
Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: openserver
References: http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html, http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html
CVE-2001-0951
Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://marc.info/?l=bugtraq&m=100774842520403&w=2, http://marc.info/?l=bugtraq&m=100813081913496&w=2, http://www.securityfocus.com/bid/3652
CVE-2001-1213
The default configuration of DataWizard FtpXQ 2.0 and 2.1 includes a default username and password, which allows remote attackers to read and write arbitrary files in the root folder.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ftpxq
References: http://www.iss.net/security_center/static/7715.php, http://www.securityfocus.com/archive/1/246285, http://www.securityfocus.com/bid/3716
CVE-2001-0727
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=100835204509262&w=2, http://marc.info/?l=bugtraq&m=100861273114437&w=2, http://www.cert.org/advisories/CA-2001-36.html
CVE-2001-0411
Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant to drop all connections to the source address of the packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: reliant_unix
References: http://marc.info/?l=bugtraq&m=98658209505849&w=2, http://marc.info/?l=bugtraq&m=98658209505849&w=2
CVE-2001-0459
Buffer overflows in ascdc Afterstep while running setuid allows local users to gain root privileges via a long (1) -d option, (2) -m option, or (3) -f option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ascdc, afterstep
References: http://marc.info/?l=bugtraq&m=98408897106411&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6204, http://marc.info/?l=bugtraq&m=98408897106411&w=2
CVE-2001-0012
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bind
References: http://www.cert.org/advisories/CA-2001-02.html, http://www.debian.org/security/2001/dsa-026, http://www.nai.com/research/covert/advisories/047.asp
CVE-2001-1462
WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: securid
References: http://www.kb.cert.org/vuls/id/609840, http://www.securityfocus.com/bid/3462, https://exchange.xforce.ibmcloud.com/vulnerabilities/7399