DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0265
ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: pgp
References: http://www.atstake.com/research/advisories/2001/a040901-1.txt, http://www.osvdb.org/1782, http://www.securityfocus.com/bid/2556
CVE-2001-0373
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0336.html, http://www.osvdb.org/5683, http://www.securityfocus.com/bid/2501
CVE-2001-0279
Buffer overflow in sudo earlier than 1.6.3p6 allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux_corporate_server, debian_linux, mandrake_linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0414.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0427.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0437.html
CVE-2001-0223
Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wwwwais.25.c
References: http://marc.info/?l=bugtraq&m=97984174724339&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/5980, http://marc.info/?l=bugtraq&m=97984174724339&w=2
CVE-2001-0580
Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dsl_vdns
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0050.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0050.html
CVE-2001-0285
Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html
CVE-2001-0414
Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long readvar argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ntpd, xntp3
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:31.ntpd.asc, ftp://ftp.netbsd.org/pub/NetBSD/misc/security/advisories/NetBSD-SA2001-004.txt.asc, ftp://ftp.sco.com/SSE/sse073.ltr
CVE-2001-1534
mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
Related CWEs: CWE-384
Related CAPECs: CAPEC-31, CAPEC-21, CAPEC-59
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1550
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00084.html, http://www.iss.net/security_center/static/7494.php, http://www.securityfocus.com/bid/3521
CWE: CWE-384
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1134.003, T1134.001, T1134.002, T1606, T1528
MITRE ATT&CK tactics: T1134, T1550
CVE-2001-1224
get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: adrotate_pro
References: http://www.iss.net/security_center/static/7736.php, http://www.securityfocus.com/archive/1/246994, http://www.securityfocus.com/bid/3739
CVE-2001-0248
Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux, irix
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://www.cert.org/advisories/CA-2001-07.html, http://www.nai.com/research/covert/advisories/048.asp, http://www.securityfocus.com/bid/2552
CWE: CWE-131
CVE-2001-0526
Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6626, http://archives.neohapsis.com/archives/bugtraq/2001-05/0258.html
CVE-2001-0461
template.cgi in Free On-Line Dictionary of Computing (FOLDOC) allows remote attackers to read files and execute commands via shell metacharacters in the argument to template.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: foldoc
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0109.html, http://wombat.doc.ic.ac.uk/foldoc/index.html, http://www.osvdb.org/5591
CVE-2001-0728
Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: management_agents
References: http://www.compaq.com/products/servers/management/mgtsw-advisory2.html, http://www.kb.cert.org/vuls/id/275979, http://www.securityfocus.com/bid/3376
CVE-2001-0781
Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: spoonftp
Related CWEs: CWE-284
Related CAPECs: CAPEC-563, CAPEC-536, CAPEC-478
MITRE ATT&CK Techniques: T1014, T1562.001, T1543.003
MITRE ATT&CK Tactics: T1556, T1546, T1547
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0296.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6630, http://archives.neohapsis.com/archives/bugtraq/2001-05/0296.html
CWE: CWE-284
MITRE ATT&CK techniques: T1014, T1562.001, T1543.003, T1546.008, T1037, T1562.007, T1027.009, T1543.001, T1547, T1543.004, T1562.002, T1553.004, T1546.016, T1080, T1574.011, T1556.006, T1543, T1546.004, T1547.006, T1546.001, T1562.004, T1542.003, T1505.005, T1562.008, T1562.009
MITRE ATT&CK tactics: T1556, T1546, T1547, T1542, T1505, T1553, T1562, T1574, T1543, T1027
CVE-2001-0161
Cisco 340-series Aironet access point using firmware 11.01 does not use 6 of the 24 available IV bits for WEP encryption, which makes it easier for remote attackers to mount brute force attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aironet
References: http://www.cs.jhu.edu/~seny/pubs/wince802.pdf, http://www.cs.jhu.edu/~seny/pubs/wince802.pdf
CVE-2001-1030
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_linux, mandrake_linux, mandrake_linux_corporate_server, linux, immunix
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0362.html, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-031-01, http://www.calderasystems.com/support/security/advisories/CSSA-2001-029.0.txt
CVE-2001-1547
Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages, which could allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: outlook_express
References: http://www.iss.net/security_center/static/7670.php, http://www.securityfocus.com/archive/1/243869, http://www.windows-help.net/microsoft/oe6-attach.html
CVE-2001-1427
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion
References: http://www.kb.cert.org/vuls/id/321475, http://www.macromedia.com/devnet/security/security_zone/mpsb01-07.html, http://www.securityfocus.com/bid/3023
CVE-2001-0307
Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_http_server
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html, http://www.geocities.com/gzhangx/websrv/docs/security.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2001-1566
Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: perdition, vanessa_logger
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html, http://www.securityfocus.com/bid/3740
CVE-2001-0641
Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, immunix, linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0087.html, http://www.novell.com/linux/security/advisories/2001_019_man_txt.html, http://www.redhat.com/support/errata/RHSA-2001-069.html
CVE-2001-0491
Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: raidenftpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0465.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6455, http://archives.neohapsis.com/archives/bugtraq/2001-04/0465.html
CVE-2001-0730
split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: http_server
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000430, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:077, http://www.apacheweek.com/issues/01-09-28#security
CVE-2001-1571
The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_xp
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html, http://www.iss.net/security_center/static/7732.php, http://www.securityfocus.com/bid/3720
CVE-2001-0870
HTTP server in Alchemy Eye and Alchemy Network Monitor 1.9x through 2.6.18 is enabled without authentication by default, which allows remote attackers to obtain network monitoring logs with potentially sensitive information by directly requesting the eye.ini file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: alchemy_network_monitor, alchemy_eye
References: http://marc.info/?l=bugtraq&m=100715758109838&w=2, http://www.securityfocus.com/bid/3598, https://exchange.xforce.ibmcloud.com/vulnerabilities/7630
CVE-2001-1092
msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tru64
References: http://www.kb.cert.org/vuls/id/440539, http://www.securityfocus.com/archive/1/213238, http://www.securityfocus.com/bid/3320
CVE-2001-1525
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: easynews
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html, http://www.iss.net/security_center/static/7657.php, http://www.securityfocus.com/bid/3643
CVE-2001-1411
Format string vulnerability in gm4 (aka m4) on Mac OS X may allow local users to gain privileges if gm4 is called by setuid programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
References: http://lists.apple.com/mhonarc/security-announce/msg00038.html, http://marc.info/?l=bugtraq&m=100368233714229&w=2, http://www.iss.net/security_center/static/10174.php
CVE-2001-0525
Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0193.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0195.html, http://www.securityfocus.com/bid/2749
CVE-2001-0121
ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imagecast_ic3
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0071.html, http://www.securityfocus.com/bid/2174, https://exchange.xforce.ibmcloud.com/vulnerabilities/5901
CVE-2001-1210
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ubr925, ubr920, ubr924
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html, http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html, http://www.iss.net/security_center/static/7806.php
CVE-2001-1002
The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is executed by lpd, which could allow remote attackers to gain privileges by printing a DVI file that contains malicious commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://marc.info/?l=bugtraq&m=99892644616749&w=2, http://www.redhat.com/support/errata/RHSA-2001-102.html, http://www.securityfocus.com/bid/3241
CVE-2001-1227
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zope
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3, http://www.redhat.com/support/errata/RHSA-2001-072.html, http://www.redhat.com/support/errata/RHSA-2001-115.html
CVE-2001-0354
TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: checkbo
References: http://www.securityfocus.com/archive/1/178061, http://www.securityfocus.com/bid/2634, http://www.securityfocus.com/archive/1/178061
CVE-2001-0548
Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=99598918914068&w=2, http://www.securityfocus.com/bid/3081, https://exchange.xforce.ibmcloud.com/vulnerabilities/6879
CVE-2001-0098
Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".."  string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0331.html, http://www.securityfocus.com/bid/2138, https://exchange.xforce.ibmcloud.com/vulnerabilities/5782
CVE-2001-1313
Lotus Domino R5 before R5.0.7a allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via miscellaneous packets with semi-valid BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino_r5
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0090
The Print Templates feature in Internet Explorer 5.5 executes arbitrary custom print templates without prompting the user, which could allow an attacker to execute arbitrary ActiveX controls, aka the "Browser Print Template" vulnerability.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/bid/2046, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-093, https://exchange.xforce.ibmcloud.com/vulnerabilities/5614
CVE-2001-1164
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unixware
References: ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt, ftp://stage.caldera.com/pub/security/unixware/CSSA-2001-SCO.4/CSSA-2001-SCO.4.txt
CVE-2001-0574
Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mp3mystic
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0046.html, http://mp3mystic.com/mp3mystic/news.phtml, http://www.osvdb.org/1815
CVE-2001-0680
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST (ls) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: qvt_net, avt_term
References: http://online.securityfocus.com/archive/1/216555, http://www.osvdb.org/1794, http://www.osvdb.org/4050
CVE-2001-0653
Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d) command line arguments, which is interpreted as a negative number.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendmail
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-017.txt.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000412, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-032-01
CVE-2001-1174
Buffer overflow in Elm 2.5.5 and earlier allows remote attackers to execute arbitrary code via a long Message-ID header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: elm
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-067.php, http://www.osvdb.org/5451, http://www.redhat.com/support/errata/RHSA-2001-091.html
CVE-2001-0080
Cisco Catalyst 6000, 5000, or 4000 switches allow remote attackers to cause a denial of service by connecting to the SSH service with a non-SSH client, which generates a protocol mismatch error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_6000, catalyst_5000, catalyst_4000
References: http://www.cisco.com/warp/public/707/catalyst-ssh-protocolmismatch-pub.shtml, http://www.securityfocus.com/bid/2117, https://exchange.xforce.ibmcloud.com/vulnerabilities/5760
CVE-2001-0260
Buffer overflow in Lotus Domino Mail Server 5.0.5 and earlier allows a remote attacker to crash the server or execute arbitrary code via a long "RCPT TO" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: domino_mail_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0360.html, http://www.osvdb.org/3321, http://www.securityfocus.com/bid/2283
CVE-2001-0849
viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: viralator
References: http://marc.info/?l=bugtraq&m=100463639800515&w=2, http://viralator.loddington.com/changes.html, http://www.securityfocus.com/bid/3495
CVE-2001-0142
squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: secure_linux, linux, mandrake_linux, immunix, squid_web_proxy
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0212.html, http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.debian.org/security/2001/dsa-019
CVE-2001-1383
initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://rhn.redhat.com/errata/RHSA-2001-110.html, http://www.iss.net/security_center/static/7177.php, http://www.securityfocus.com/bid/3367
CVE-2001-0692
SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firebox_4500, firebox_2500
References: http://marc.info/?l=bugtraq&m=99379787421319&w=2, http://www.securityfocus.com/archive/1/189783, http://www.securityfocus.com/bid/2855
CVE-2001-0955
Buffer overflow in fbglyph.c in XFree86 before 4.2.0, related to glyph clipping for large origins, allows attackers to cause a denial of service and possibly gain privileges via a large number of characters, possibly through the web page search form of KDE Konqueror or from an xterm command with a long title.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x11r6
References: http://cvsweb.xfree86.org/cvsweb/xc/programs/Xserver/fb/fbglyph.c, http://marc.info/?l=bugtraq&m=100776624224549&w=2, http://marc.info/?l=bugtraq&m=100784290015880&w=2
CVE-2001-0084
GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privileges if GTK+ is used by a setuid/setgid program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gtk
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0498.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0027.html, http://www.gtk.org/setuid.html
CVE-2001-0144
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssh, openssh
References: http://marc.info/?l=bugtraq&m=98168366406903&w=2, http://razor.bindview.com/publish/advisories/adv_ssh1crc.html, http://www.cert.org/advisories/CA-2001-35.html
CVE-2001-1359
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: volution
References: http://www.caldera.com/support/security/advisories/CSSA-2001-021.0.txt, http://www.securityfocus.com/bid/2850, https://exchange.xforce.ibmcloud.com/vulnerabilities/6672
CVE-2001-1286
Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html, http://online.securityfocus.com/archive/1/261096, http://www.ipswitch.com/Support/IMail/news.html
CVE-2001-0705
Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with "dot dot" sequences in the template argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: arcadia_internet_store
References: http://www.securityfocus.com/archive/1/192651, http://www.securityfocus.com/bid/2902, https://exchange.xforce.ibmcloud.com/vulnerabilities/6737
CVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html, http://phpnuke.org/download.php?dcategory=Fixes, http://www.securityfocus.com/bid/2544
CVE-2001-0795
Perception LiteServe 1.25 allows remote attackers to obtain source code of CGI scripts via URLs that contain MS-DOS conventions such as (1) upper case letters or (2) 8.3 file names.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: liteserve
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0328.html, http://www.securityfocus.com/bid/2926, http://archives.neohapsis.com/archives/bugtraq/2001-06/0328.html
CWE: CWE-178
CVE-2001-0245
Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: indexing_service, index_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025, https://exchange.xforce.ibmcloud.com/vulnerabilities/6518, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-025
CVE-2001-0907
Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079
CVE-2001-0069
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux
References: http://www.debian.org/security/2000/20001225, http://www.securityfocus.com/bid/2151, https://exchange.xforce.ibmcloud.com/vulnerabilities/5809
CVE-2001-0866
Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.iss.net/security_center/static/7554.php
CVE-2001-0156
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vshell
References: http://www.atstake.com/research/advisories/2001/a021601-1.txt, http://www.securityfocus.com/bid/2402, http://www.vandyke.com/products/vshell/security102.html
CVE-2001-0553
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_shell
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html, http://www.ciac.org/ciac/bulletins/l-121.shtml, http://www.kb.cert.org/vuls/id/737451
CVE-2001-0163
Cisco AP340 base station produces predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aironet_ap340
References: http://www.cs.jhu.edu/~seny/pubs/wince802.pdf, http://www.cs.jhu.edu/~seny/pubs/wince802.pdf
CVE-2001-0482
Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pitbull_lx
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0475.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6623, http://archives.neohapsis.com/archives/bugtraq/2001-03/0475.html
CVE-2001-1295
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cerberus_ftp_server
References: http://www.greenepa.net/~averett/cerberus-releasenotes.htm#ReleaseNotes, http://www.iss.net/security_center/static/7004.php, http://www.securiteam.com/windowsntfocus/5SP0M0055W.html
CVE-2001-0207
Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bing
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0330.html, http://www.securityfocus.com/bid/2279, https://exchange.xforce.ibmcloud.com/vulnerabilities/6036
CVE-2001-1047
Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://seclists.org/bugtraq/2001/Jun/0020.html, http://www.securityfocus.com/bid/2817, http://www.securityfocus.com/bid/2818
CVE-2001-0956
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: speechd
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0089.html, http://www.securityfocus.com/bid/3326, http://www.speechio.org/speechd.html
CVE-2001-0964
Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: half-life
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7148, http://archives.neohapsis.com/archives/bugtraq/2001-09/0178.html
CVE-2001-0283
Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAME, or (5) PUT.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: sun_ftp
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0523.html
CVE-2001-0786
Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.Dat file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: air_messenger_lan_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html, http://www.securityfocus.com/bid/2882, http://archives.neohapsis.com/archives/bugtraq/2001-06/0228.html
CVE-2001-0979
Buffer overflow in swverify in HP-UX 11.0, and possibly other programs, allows local users to gain privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.securityfocus.com/archive/1/211687, http://www.securityfocus.com/bid/3279, https://exchange.xforce.ibmcloud.com/vulnerabilities/7078
CVE-2001-1156
TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: typsoft_ftp_server
References: http://membres.lycos.fr/typsoft/eng/history.html, http://www.iss.net/security_center/static/7247.php, http://www.securityfocus.com/archive/1/219167
CVE-2001-0488
pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://www.osvdb.org/2188, http://www.securityfocus.com/bid/2646, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0104-149
CVE-2001-0841
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ikonboard
References: http://marc.info/?l=bugtraq&m=100446445208739&w=2, http://www.iss.net/security_center/static/7433.php, http://www.securityfocus.com/bid/3486
CVE-2001-1126
Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: liveupdate
References: http://www.sarc.com/avcenter/security/Content/2001.10.05.html, http://www.securityfocus.com/archive/1/218717, http://www.securityfocus.com/bid/3413
CVE-2001-1098
Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pix_firewall_manager
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html, http://www.kb.cert.org/vuls/id/639507, http://www.securityfocus.com/bid/3419
CVE-2001-0287
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cluster_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0528.html, http://seer.support.veritas.com/docs/234326.htm, http://www.osvdb.org/6025
CVE-2001-0122
Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of service via a series of malformed HTTP requests that generate a "bad request" error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websphere_application_server, http_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0079.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0061.html, http://www-4.ibm.com/software/webservers/security.html
CVE-2001-1211
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://support.ipswitch.com/kb/IM-20011219-DM01.htm, http://support.ipswitch.com/kb/IM-20020301-DM02.htm, http://www.iss.net/security_center/static/7752.php
CVE-2001-1236
myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: myphppagetool
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.iss.net/security_center/static/7215.php, http://www.kb.cert.org/vuls/id/847803
CVE-2001-0537
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: ios
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://www.cert.org/advisories/CA-2001-14.html, http://www.ciac.org/ciac/bulletins/l-106.shtml, http://www.cisco.com/warp/public/707/IOS-httplevel-pub.html
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2001-0270
Marconi ASX-1000 ASX switches allow remote attackers to cause a denial of service in the telnet and web management interfaces via a malformed packet with the SYN-FIN and More Fragments attributes set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: forethought, asx-1000
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0349.html, http://www.securityfocus.com/bid/2400, http://archives.neohapsis.com/archives/bugtraq/2001-02/0349.html
CVE-2001-0332
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and GetObject, aka a variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=98609031517525&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027, http://marc.info/?l=bugtraq&m=98609031517525&w=2
CVE-2001-0216
PALS Library System pals-cgi program allows remote attackers to execute arbitrary commands via shell metacharacters in the documentName parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webpals
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0220.html, http://www.securityfocus.com/bid/2372, https://exchange.xforce.ibmcloud.com/vulnerabilities/6102
CVE-2001-0194
Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cups
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-020.php3, http://www.osvdb.org/6064, https://exchange.xforce.ibmcloud.com/vulnerabilities/6043
CVE-2001-0149
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2000-09/0305.html, http://marc.info/?l=ntbugtraq&m=96999020527583&w=2, http://www.securityfocus.com/bid/1718
CVE-2001-0711
Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/6169, http://www.cisco.com/warp/public/707/ios-snmp-ilmi-vuln-pub.shtml
CVE-2001-0157
Debugging utility in the backdoor mode of Palm OS 3.5.2 and earlier allows attackers with physical access to a Palm device to bypass access restrictions and obtain passwords, even if the system lockout mechanism is enabled.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: palm_os
References: http://www.atstake.com/research/advisories/2001/a030101-1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/6196, http://www.atstake.com/research/advisories/2001/a030101-1.txt
CVE-2001-0083
Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Severed Windows Media Server Connection" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_media_services
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ281256, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-097, https://exchange.xforce.ibmcloud.com/vulnerabilities/5785
CVE-2001-1532
WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webx
References: http://www.iss.net/security_center/static/7458.php, http://www.securityfocus.com/archive/1/223799, http://www.iss.net/security_center/static/7458.php
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: arcserve_backup
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html, http://www.securityfocus.com/bid/2741, http://www.securityfocus.com/bid/2748
CVE-2001-0380
Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: xlt-f
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718, http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html
CVE-2001-0374
The HTTP server in Compaq web-enabled management software for (1) Foundation Agents, (2) Survey, (3) Power Manager, (4) Availability Agents, (5) Intelligent Cluster Administrator, and (6) Insight Manager can be used as a generic proxy server, which allows remote attackers to bypass access restrictions via the management port, 2301.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web-enabled_management
References: http://archives.neohapsis.com/archives/vuln-dev/2001-q1/0779.html, http://www.compaq.com/products/servers/management/mgtsw-advisory.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6264
CVE-2001-1091
The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc, https://exchange.xforce.ibmcloud.com/vulnerabilities/7037, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc