DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1580
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware, scriptease_webserver
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0204.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0218.html, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0221.html
CVE-2001-1390
Unknown vulnerability in binfmt_misc in the Linux kernel before 2.2.19, related to user pages.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE-2001-0505
Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: services
References: http://www.kb.cert.org/vuls/id/581603, http://www.kb.cert.org/vuls/id/994851, http://www.securityfocus.com/bid/3089
CVE-2001-1436
Dallas Semiconductor iButton DS1991 returns predictable values when given an incorrect password, which makes it easier for users with physical access to conduct dictionary attacks against the device password.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ibutton
References: http://www.atstake.com/research/advisories/2001/a011801-1.txt, http://www.kb.cert.org/vuls/id/178560, https://exchange.xforce.ibmcloud.com/vulnerabilities/10625
CVE-2001-1341
The Beck GmbH IPC@Chip embedded web server installs the chipcfg.cgi program by default, which allows remote attackers to obtain sensitive network information via a request to the program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ipc_at_chip_embedded-webserver
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html, http://www.iss.net/security_center/static/6600.php, http://www.kb.cert.org/vuls/id/574739
CVE-2001-0139
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: debian_linux, openlinux_edesktop, mandrake_linux, linux, openlinux_desktop
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.calderasystems.com/support/security/advisories/CSSA-2001-001.0.txt, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-010.php3
CVE-2001-1270
Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: pkzip
References: http://online.securityfocus.com/archive/1/196445, http://www.security.nnov.ru/advisories/archdt.asp, http://online.securityfocus.com/archive/1/196445
CVE-2001-1567
Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: lotus_domino_server, lotus_domino
References: http://marc.info/?l=bugtraq&m=101284222932568&w=2, http://marc.info/?l=bugtraq&m=101285903120879&w=2, http://marc.info/?l=bugtraq&m=101286525008089&w=2
CVE-2001-0246
Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain, aka a variant of the "Frame Domain Verification" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: internet_explorer
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027
CVE-2001-0566
Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP  is disabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_2900
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0040.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6515, http://archives.neohapsis.com/archives/bugtraq/2001-05/0040.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2001-0652
Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://marc.info/?l=bugtraq&m=99745571104126&w=2, http://www.securityfocus.com/bid/3160, https://exchange.xforce.ibmcloud.com/vulnerabilities/6967
CVE-2001-0355
Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise
References: http://marc.info/?l=bugtraq&m=98185226715517&w=2, http://marc.info/?l=bugtraq&m=98185226715517&w=2
CVE-2001-0228
Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: goahead_webserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0022.html, http://freecode.com/projects/embedthis-goahead-webserver/releases/343539, http://osvdb.org/81099
CVE-2001-0794
Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: anonymous_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0280.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0280.html
CVE-2001-0985
shop.pl in Hassan Consulting Shopping Cart 1.23 allows remote attackers to execute arbitrary commands via shell metacharacters in the "page" parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shopping_cart
References: http://www.irata.com/shopver.html, http://www.securityfocus.com/archive/1/212827, http://www.securityfocus.com/bid/3308
CVE-2001-1559
The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
Related CWEs: CWE-476
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0014.html, http://monkey.org/openbsd/archive/tech/0112/msg00015.html, http://www.iss.net/security_center/static/7690.php
CWE: CWE-476
CVE-2001-0072
gpg (aka GnuPG) 1.0.4 and other versions imports both public and private keys from public key servers without notifying the user about the private keys, which could allow an attacker to break the web of trust.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: privacy_guard
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368, http://www.debian.org/security/2000/20001225b, http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3
CVE-2001-1397
The System V (SYS5) shared memory implementation for Linux kernel before 2.2.19 could allow attackers to modify recently freed memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE-2001-0211
Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webspirs
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html, http://www.securityfocus.com/bid/2362, http://archives.neohapsis.com/archives/bugtraq/2001-02/0217.html
CVE-2001-0250
The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0396.html, http://www.securityfocus.com/bid/2285, https://exchange.xforce.ibmcloud.com/vulnerabilities/5997
CVE-2001-0836
Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server_web_cache
References: http://marc.info/?l=bugtraq&m=100342151132277&w=2, http://marc.info/?l=bugtraq&m=100395487007578&w=2, http://otn.oracle.com/deploy/security/pdf/webcache.pdf
CVE-2001-0333
Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_information_server
References: http://marc.info/?l=bugtraq&m=98992056521300&w=2, http://www.cert.org/advisories/CA-2001-12.html, http://www.securityfocus.com/bid/2708
CVE-2001-1221
D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dwl-1000ap
References: http://www.securityfocus.com/archive/1/246849, http://www.securityfocus.com/bid/3736, http://www.securityfocus.com/archive/1/246849
CVE-2001-1363
Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpwebsite
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html, http://phpwebsite.appstate.edu/downloads/0.7.9/phpWebSite-en-0.7.9.tar.gz, http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html
CVE-2001-1513
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' (slash), as demonstrated using ctx.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jrun
References: http://www.iss.net/security_center/static/7680.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=22260&Method=Full, http://www.securityfocus.com/bid/3600
CVE-2001-0629
HP Event Correlation Service (ecsd) as included with OpenView Network Node  Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openview_network_node_manager
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0226.html, http://www.securityfocus.com/bid/2761, http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0107-158
CWE: CWE-119
CVE-2001-1123
Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openview_network_node_manager
References: http://www.kb.cert.org/vuls/id/782155, http://www.securityfocus.com/advisories/3585, http://www.securityfocus.com/advisories/3723
CVE-2001-0691
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imapd
References: http://www.iss.net/security_center/static/6269.php, http://www.redhat.com/support/errata/RHSA-2001-094.html, http://www.securityfocus.com/advisories/3352
CVE-2001-1249
vWebServer 1.2.0 allows remote attackers to cause a denial of service via a URL that contains MS-DOS device names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vwebserver
References: http://online.securityfocus.com/archive/1/194418, http://www.securityfocus.com/bid/2978, http://online.securityfocus.com/archive/1/194418
CVE-2001-0935
Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wu-ftpd
References: http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html, http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html
CVE-2001-1032
admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0203.html, http://sourceforge.net/forum/forum.php?forum_id=113892, http://www.securityfocus.com/bid/3361
CVE-2001-0042
PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://www.securityfocus.com/archive/1/149210, http://www.securityfocus.com/bid/2060, https://exchange.xforce.ibmcloud.com/vulnerabilities/5659
CVE-2001-1136
The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q3/0063.html, http://www.ciac.org/ciac/bulletins/l-143.shtml, http://www.securityfocus.com/bid/3338
CVE-2001-1272
wmtv 0.6.5 and earlier does not properly drop privileges, which allows local users to execute arbitrary commands via the -e (external command) option.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wmtv
References: http://www.debian.org/security/2001/dsa-092, http://www.iss.net/security_center/static/7669.php, http://www.securityfocus.com/bid/3658
CVE-2001-1199
Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: agora.cgi
References: http://www.agoracgi.com/security.html, http://www.iss.net/security_center/static/7708.php, http://www.osvdb.org/698
CVE-2001-1404
Bugzilla before 2.14 stores user passwords in plaintext and sends password requests in an email message, which could allow attackers to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=74032, http://marc.info/?l=bugtraq&m=99912899900567, http://www.redhat.com/support/errata/RHSA-2001-107.html
CVE-2001-1331
mandb in the man-db package before 2.3.16-3 allows local users to overwrite arbitrary files via the command line options (1) -u or (2) -c, which do not drop privileges and follow symlinks.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: debian_linux, debian
References: http://online.securityfocus.com/advisories/3307, http://www.debian.org/security/2001/dsa-056, http://www.securityfocus.com/bid/2720
CVE-2001-1279
Buffer overflow in print-rx.c of tcpdump 3.x (probably 3.6x) allows remote attackers to cause a denial of service and possibly execute arbitrary code via AFS RPC packets with invalid lengths that trigger an integer signedness error, a different vulnerability than CVE-2000-1026.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tcpdump
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:48.tcpdump.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000480
CVE-2001-0128
Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux, mandrake_linux, freebsd, linux_powertools
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:06.zope.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000365, http://www.debian.org/security/2000/20001219
CVE-2001-0239
Microsoft Internet Security and Acceleration (ISA) Server 2000 Web Proxy allows remote attackers to cause a denial of service via a long web request with a specific type.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isa_server
References: http://www.ciac.org/ciac/bulletins/l-073.shtml, http://www.securityfocus.com/archive/1/176912, http://www.securityfocus.com/archive/1/177160
CVE-2001-0997
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: listrec.pl
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7117, http://archives.neohapsis.com/archives/bugtraq/2001-09/0096.html
CVE-2001-0689
Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virus_control_system
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0065.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0065.html
CVE-2001-1317
Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: teamware_office
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0921
Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: communicator
References: http://marc.info/?l=bugtraq&m=100638816318705&w=2, http://www.osvdb.org/5524, http://www.securityfocus.com/bid/3565
CVE-2001-1372
Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://marc.info/?l=bugtraq&m=100074087824021&w=2, http://marc.info/?l=bugtraq&m=100119633925473&w=2, http://otn.oracle.com/deploy/security/pdf/jspexecute_alert.pdf
CVE-2001-0479
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phppgadmin
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html, http://www.greatbridge.org/project/phppgadmin/cvs/checkout.php/phpPgAdmin/ChangeLog?r=1.13, http://www.securityfocus.com/bid/2640
CVE-2001-1016
PGP Corporate Desktop before 7.1, Personal Security before 7.0.3, Freeware before 7.0.3, and E-Business Server before 7.1 does not properly display when invalid userID's are used to sign a message, which could allow an attacker to make the user believe that the document has been signed by a trusted third party by adding a second, invalid user ID to a key which has already been signed by the third party, aka the "PGPsdk Key Validity Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e-business_server, freeware, pgp, corporate_desktop, personal_security
References: http://www.osvdb.org/1946, http://www.pgp.com/support/product-advisories/pgpsdk.asp, http://www.securityfocus.com/archive/1/211806
CVE-2001-0320
bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0425.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0425.html
CVE-2001-0041
Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: catos
Related CWEs: CWE-399
References: http://www.cisco.com/warp/public/707/catalyst-memleak-pub.shtml, http://www.osvdb.org/801, http://www.securityfocus.com/bid/2072
CWE: CWE-399
CVE-2001-1440
Unknown vulnerability in login for AIX 5.1L, when using loadable authentication modules, allows remote attackers to gain access to the system.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://securitytracker.com/id?1003038, http://www-1.ibm.com/support/search.wss?rs=0&q=IY26302&apar=only, http://www.kb.cert.org/vuls/id/249491
CVE-2001-0886
Buffer overflow in glob function of glibc allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a glob pattern that ends in a brace "{" character.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000447, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-037-01, http://sources.redhat.com/ml/bug-glibc/2001-11/msg00109.html
CVE-2001-0529
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openssh
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc, http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html
CVE-2001-1308
Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: iplanet_directory_server
References: ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I, http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html
CVE-2001-0315
The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mirc
References: http://marc.info/?l=bugtraq&m=98053777917287&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6013, http://marc.info/?l=bugtraq&m=98053777917287&w=2
CVE-2001-1520
Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xircom_rex_6000
References: http://archives.neohapsis.com/archives/bugtraq/2001-11/0187.html, http://www.iss.net/security_center/static/7584.php, http://www.securityfocus.com/bid/3574
CVE-2001-0014
Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000
References: http://www.securityfocus.com/bid/2326, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-006, http://www.securityfocus.com/bid/2326
CVE-2001-0403
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6267, http://archives.neohapsis.com/archives/bugtraq/2001-03/0326.html
CVE-2001-0035
Buffer overflow in the kdc_reply_cipher function in KTH Kerberos IV allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long authentication request.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kth_kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0093.html, http://archives.neohapsis.com/archives/bugtraq/2000-12/0105.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0511.html
CVE-2001-0644
Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rumpus_ftp_server
References: http://www.securityfocus.com/archive/1/184751, http://www.securityfocus.com/bid/2718, https://exchange.xforce.ibmcloud.com/vulnerabilities/6543
CVE-2001-0261
Microsoft Windows 2000 Encrypted File System does not properly destroy backups of files that are encrypted, which allows a local attacker to recover the text of encrypted files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000
References: http://marc.info/?l=bugtraq&m=97992179925715&w=2, http://marc.info/?l=bugtraq&m=98027311214976&w=2, http://www.securityfocus.com/bid/2243
CVE-2001-0797
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix, hp-ux, openserver, solaris, sunos
References: ftp://patches.sgi.com/support/free/security/advisories/20011201-01-I, ftp://stage.caldera.com/pub/security/openserver/CSSA-2001-SCO.40/CSSA-2001-SCO.40.txt, http://marc.info/?l=bugtraq&m=100844757228307&w=2
CVE-2001-0324
Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_98
References: http://archives.neohapsis.com/archives/win2ksecadvice/2001-q1/0060.html, http://www.securityfocus.com/bid/2340, http://archives.neohapsis.com/archives/win2ksecadvice/2001-q1/0060.html
CVE-2001-1365
Vulnerability in IntraGnat before 1.4.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: intragnat
References: http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0011.html, http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html, http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0011.html
CVE-2001-0605
Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mygetright
References: http://marc.info/?l=bugtraq&m=98321819112158&w=2, http://marc.info/?l=bugtraq&m=98321819112158&w=2
CVE-2001-1311
Buffer overflows in Lotus Domino R5 before R5.0.7a allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino_r5
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0876
Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_me, windows_xp, windows_98se, windows_98
References: http://marc.info/?l=bugtraq&m=100887440810532&w=2, http://marc.info/?l=ntbugtraq&m=100887271006313&w=2, http://www.cert.org/advisories/CA-2001-37.html
CVE-2001-1384
ptrace in Linux 2.2.x through 2.2.19, and 2.4.x through 2.4.9, allows local users to gain root privileges by running ptrace on a setuid or setgid program that itself calls an unprivileged program, such as newgrp.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01, http://marc.info/?l=bugtraq&m=100343090106914&w=2
CVE-2001-0045
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: http://www.securityfocus.com/bid/2064, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-095, https://exchange.xforce.ibmcloud.com/vulnerabilities/5671
CVE-2001-0025
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ad.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0143.html, http://www.securityfocus.com/bid/2103, https://exchange.xforce.ibmcloud.com/vulnerabilities/5741
CVE-2001-1083
Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or \ (backward slash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icecast
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-020.0.txt, http://www.debian.org/security/2001/dsa-089, http://www.icecast.org/index.html
CVE-2001-0720
Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://www.ciac.org/ciac/bulletins/m-013.shtml, http://www.securityfocus.com/bid/3471, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-053
CVE-2001-1165
Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fileguard, diskguard
References: http://www.iss.net/security_center/static/7018.php, http://www.securemac.com/fileguard.php#disengage, http://www.securityfocus.com/bid/3213
CVE-2001-0167
Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: winvnc
References: http://marc.info/?l=bugtraq&m=98088315825366&w=2, http://www.securityfocus.com/bid/2305, https://exchange.xforce.ibmcloud.com/vulnerabilities/6025
CVE-2001-1430
Cayman 3220-H DSL Router 1.0 ship without a password set, which allows remote attackers to gain unauthorized access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 3220-h_dsl_router
References: http://www.kb.cert.org/vuls/id/557136, http://www.kb.cert.org/vuls/id/JARL-4ZTKY9, http://www.securityfocus.com/archive/1/196083
CVE-2001-1409
dexconf in XFree86 Xserver 4.1.0-2 creates the /dev/dri directory with insecure permissions (666), which allows local users to replace or create files in the root file system.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: xfree86_x_server
References: http://groups.google.com/groups?selm=20010829121505.A16004%40compusol.com.au, http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1, http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1
CVE-2001-0469
rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://archives.neohapsis.com/archives/freebsd/2001-03/0163.html, http://www.securityfocus.com/bid/2473, https://exchange.xforce.ibmcloud.com/vulnerabilities/6229
CVE-2001-0726
Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exchange_server
References: http://www.osvdb.org/5557, http://www.securityfocus.com/bid/3650, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-057
CVE-2001-0073
Buffer overflow in the find_default_type function in libsecure in NSA Security-enhanced Linux, which may allow attackers to modify critical data in memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: security-enhanced_linux
References: http://www.securityfocus.com/archive/1/153188, http://www.securityfocus.com/bid/2154, http://www.securityfocus.com/archive/1/153188
CVE-2001-1068
qpopper 4.01 with PAM based authentication on Red Hat systems generates different error messages when an invalid username is provided instead of a valid name, which allows remote attackers to determine valid usernames on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: qpopper
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0363.html, http://www.securityfocus.com/bid/3242, https://exchange.xforce.ibmcloud.com/vulnerabilities/7047
CVE-2001-0729
Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://secunia.com/advisories/23794, http://securitytracker.com/id?1017522, http://www.apacheweek.com/issues/01-09-28#security
CVE-2001-0071
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: privacy_guard
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000368, http://www.debian.org/security/2000/20001225b, http://www.linux-mandrake.com/en/updates/2000/MDKSA-2000-087.php3
CVE-2001-0496
kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux, mandrake_linux
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-046.php3, http://www.redhat.com/support/errata/RHSA-2001-059.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6856
CVE-2001-0920
Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: autonice_daemon
References: http://and.sourceforge.net/, http://marc.info/?l=bugtraq&m=100680319004162&w=2, http://www.securityfocus.com/bid/3580
CVE-2001-0057
Cisco 600 routers running CBOS 2.4.1 and earlier allow remote attackers to cause a denial of service via a large ICMP echo (ping) packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cisco_6xx_routers, broadband_operating_system
References: http://www.cisco.com/warp/public/707/CBOS-multiple.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/5629, http://www.cisco.com/warp/public/707/CBOS-multiple.shtml
CVE-2001-1491
Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: opera_web_browser
References: http://www.securityfocus.com/archive/1/245152, http://www.securityfocus.com/bid/3684, https://exchange.xforce.ibmcloud.com/vulnerabilities/7709
CVE-2001-0918
Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/2001_041_susehelp_txt.html, http://www.securityfocus.com/bid/3576, https://exchange.xforce.ibmcloud.com/vulnerabilities/7583
CVE-2001-1218
Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ie
References: http://www.securityfocus.com/archive/1/246611, http://www.securityfocus.com/bid/3729, http://www.securityfocus.com/archive/1/246611
CVE-2001-1040
HP LaserJet, and possibly other JetDirect devices, resets the admin password when the device is turned off, which could allow remote attackers to access the device without the password.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: jetadmin
References: http://www.securityfocus.com/archive/1/201224, http://www.securityfocus.com/bid/3132, http://www.securityfocus.com/archive/1/201224
CVE-2001-1182
Vulnerability in login in HP-UX 11.00, 11.11, and 10.20 allows restricted shell users to bypass certain security checks and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q3/0014.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5657, http://archives.neohapsis.com/archives/hp/2001-q3/0014.html
CVE-2001-1054
PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpadsnew
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://sourceforge.net/forum/forum.php?forum_id=117952, http://sourceforge.net/forum/forum.php?thread_id=148900&forum_id=117952
CVE-2001-0603
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_r5_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6350, http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE-2001-1073
Webridge PX Application Suite allows remote attackers to obtain sensitive information via a malformed request that generates a server error message, which includes full pathname or internal IP address information in the variables (1) APPL_PHYSICAL_PATH, (2) PATH_TRANSLATED, and (3) LOCAL_ADDR.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: px_application_suite
References: http://www.securityfocus.com/archive/1/204725, http://www.securityfocus.com/bid/3182, https://exchange.xforce.ibmcloud.com/vulnerabilities/6993
CVE-2001-0267
NM debug in HP MPE/iX 6.5 and earlier does not properly handle breakpoints, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mpe_ix
References: http://archives.neohapsis.com/archives/hp/2001-q1/0050.html, http://www.osvdb.org/6032, https://exchange.xforce.ibmcloud.com/vulnerabilities/6226
CVE-2001-1029
libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd, openssh
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0173.html, http://www.osvdb.org/6073, https://exchange.xforce.ibmcloud.com/vulnerabilities/8697
CVE-2001-0168
Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winvnc
References: http://marc.info/?l=vnc-list&m=98080763005455&w=2, http://www.kb.cert.org/vuls/id/598581, http://www.securityfocus.com/bid/2306
CVE-2001-0052
IBM DB2 Universal Database version 6.1 allows users to cause a denial of service via a malformed query.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: db2_universal_database
References: http://www.securityfocus.com/archive/1/149207, http://www.securityfocus.com/bid/2067, https://exchange.xforce.ibmcloud.com/vulnerabilities/5664
CVE-2001-0702
Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ceberus_ftp_server
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00070.html, http://www.securityfocus.com/archive/1/192655, http://www.securityfocus.com/bid/2901
CVE-2001-1044
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: basilix_webmail
References: http://www.securityfocus.com/archive/1/155897, http://www.securityfocus.com/bid/2198, https://exchange.xforce.ibmcloud.com/vulnerabilities/5934
CVE-2001-0455
Cisco Aironet 340 Series wireless bridge before 8.55 does not properly disable access to the web interface, which allows remote attackers to modify its configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aironet_340
References: http://www.cisco.com/warp/public/707/Aironet340-pub.shtml, http://www.osvdb.org/5597, https://exchange.xforce.ibmcloud.com/vulnerabilities/6200
CVE-2001-0201
The Postaci frontend for PostgreSQL does not properly filter characters such as semicolons, which could allow remote attackers to execute arbitrary SQL queries via the deletecontact.php program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postaci
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0287.html, http://www.securityfocus.com/bid/2230, https://exchange.xforce.ibmcloud.com/vulnerabilities/5972
CVE-2001-0643
Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_explorer
References: http://vil.nai.com/vil/virusSummary.asp?virus_k=99048, http://www.guninski.com/clsidext.html, http://www.osvdb.org/7858