DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0068
Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: mac_os_runtime_for_java
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0241.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/5784, http://archives.neohapsis.com/archives/bugtraq/2000-12/0241.html
CVE-2001-0713
Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sendmail
References: http://razor.bindview.com/publish/advisories/adv_sm812.html, http://www.iss.net/security_center/static/7192.php, http://www.securityfocus.com/bid/3377
CVE-2001-1548
ZoneAlarm 2.1 through 2.6 and ZoneAlarm Pro 2.4 and 2.6 allows local users to bypass filtering via non-standard TCP packets created with non-Windows protocol adapters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zonealarm
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0056.html, http://archives.neohapsis.com/archives/bugtraq/2001-12/0065.html, http://www.iss.net/security_center/static/7671.php
CVE-2001-0233
Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux, micq
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:14.micq.asc, http://archives.neohapsis.com/archives/bugtraq/2001-01/0307.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0395.html
CVE-2001-0591
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server, jsp
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0239.html, http://www.securityfocus.com/bid/2286, https://exchange.xforce.ibmcloud.com/vulnerabilities/5986
CVE-2001-0123
Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bbs_forum.cgi
References: http://marc.info/?l=bugtraq&m=97905792214999&w=2, http://www.extropia.com/hacks/bbs_security.html, http://www.osvdb.org/3546
CVE-2001-1412
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/mhonarc/security-announce/msg00038.html, http://lists.insecure.org/lists/bugtraq/2002/Sep/0128.html, http://marc.info/?l=bugtraq&m=99953038722104&w=2
CVE-2001-0587
deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0418.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, http://www.securityfocus.com/bid/2583
CVE-2001-0560
Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters).
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vixie_cron
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0197.html, http://archives.neohapsis.com/archives/linux/immunix/2001-q1/0066.html, http://www-1.ibm.com/support/search.wss?rs=0&q=IY17048&apar=only
CVE-2001-1329
Buffer overflow in rsh on AIX 4.2.0.0 may allow local users to gain root privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0133.html
CVE-2001-0750
Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/ios-tcp-scanner-reload-pub.shtml, http://www.osvdb.org/800, http://www.securityfocus.com/bid/2804
CVE-2001-0032
Format string vulnerability in ssldump possibly allows remote attackers to cause a denial of service and possibly gain root privileges via malicious format string specifiers in a URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ssldump
References: http://www.securityfocus.com/archive/1/149917, http://www.securityfocus.com/bid/2096, https://exchange.xforce.ibmcloud.com/vulnerabilities/5717
CVE-2001-0899
Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, network_tools
References: http://marc.info/?l=bugtraq&m=100593523104176&w=2, http://phpnukerz.org/modules.php?name=Downloads&d_op=viewsdownload&sid=32, https://exchange.xforce.ibmcloud.com/vulnerabilities/7578
CVE-2001-0173
Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: crazywwwboard, qdecoder
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0486.html, http://www.securityfocus.com/bid/2329, https://exchange.xforce.ibmcloud.com/vulnerabilities/6033
CVE-2001-1075
poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by user" string that includes the attacker's IP address to be injected into the maillog log file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cobalt_raq_3i
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0064.html, http://archives.neohapsis.com/archives/bugtraq/2001-07/0150.html, http://www.securityfocus.com/bid/2986
CVE-2001-0438
Preview version of Timbuktu for Mac OS X allows local users to modify System Preferences without logging in via the About Timbuktu menu.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: timbuktu_mac
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0337.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0337.html
CVE-2001-0832
Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the "Oracle File Overwrite Security Vulnerability."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: database_server
References: http://marc.info/?l=bugtraq&m=100386756715645&w=2, http://otn.oracle.com/deploy/security/pdf/oracle_race.pdf, http://marc.info/?l=bugtraq&m=100386756715645&w=2
CVE-2001-1552
ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message.  NOTE: multiple replies to the original post state that the problem could not be reproduced.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_me
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0133.html, http://www.iss.net/security_center/static/7318.php, http://www.securityfocus.com/bid/3442
CVE-2001-0322
MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, outlook_express, internet_explorer
References: http://marc.info/?l=bugtraq&m=97958685100219&w=2, http://www.securityfocus.com/bid/2202, https://exchange.xforce.ibmcloud.com/vulnerabilities/5938
CVE-2001-0547
Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: isa_server
References: http://www.securityfocus.com/bid/3197, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-045, https://exchange.xforce.ibmcloud.com/vulnerabilities/6990
CVE-2001-0111
Format string vulnerability in splitvt before 1.6.5 allows local users to execute arbitrary commands via the -rcfile command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, splitvt
References: http://marc.info/?l=bugtraq&m=97958269320974&w=2, http://www.debian.org/security/2001/dsa-014, http://www.securityfocus.com/bid/2210
CVE-2001-0006
The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.
CVSS v3.1 Score: 7.1 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
Related CWEs: CWE-732
Related CAPECs: CAPEC-17, CAPEC-206, CAPEC-234
MITRE ATT&CK Techniques: T1553.002, T1083, T1505.005
MITRE ATT&CK Tactics: T1134, T1505, T1553
References: http://marc.info/?l=bugtraq&m=98075221915234&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-003, https://exchange.xforce.ibmcloud.com/vulnerabilities/6006
CWE: CWE-732
MITRE ATT&CK techniques: T1553.002, T1083, T1505.005, T1550.004, T1134.001, T1574.010, T1548, T1554, T1574.005
MITRE ATT&CK tactics: T1134, T1505, T1553, T1550, T1574
CVE-2001-0119
getty_ps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: linux, immunix, mandrake_linux
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-004.php3, http://www.securityfocus.com/bid/2194
CVE-2001-0277
Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: badblue
References: http://marc.info/?l=bugtraq&m=98263019502565&w=2, http://www.securityfocus.com/bid/2392, http://marc.info/?l=bugtraq&m=98263019502565&w=2
CVE-2001-1237
Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phormation
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.iss.net/security_center/static/7215.php, http://www.kb.cert.org/vuls/id/847803
CVE-2001-0423
Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ (timezone) environmental variable, a different vulnerability than CAN-2002-0093.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0217.html, http://www.securityfocus.com/bid/2581, https://exchange.xforce.ibmcloud.com/vulnerabilities/6369
CVE-2001-0393
Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without providing a username/password combination, which consumes the license limits.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: financials_server
References: http://marc.info/?l=bugtraq&m=98637870623514&w=2, http://marc.info/?l=bugtraq&m=98637870623514&w=2
CVE-2001-0704
tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a file that does not exist.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: arcadia_internet_store
References: http://www.securityfocus.com/archive/1/192651, http://www.securityfocus.com/bid/2904, https://exchange.xforce.ibmcloud.com/vulnerabilities/6738
CVE-2001-0860
Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_xp
References: http://marc.info/?l=bugtraq&m=100578220002083&w=2, http://www.securityfocus.com/bid/3541, https://exchange.xforce.ibmcloud.com/vulnerabilities/7538
CVE-2001-0799
Buffer overflows in lpsched in IRIX 6.5.13f and earlier allow remote attackers to execute arbitrary commands via a long argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P, http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2, http://www.osvdb.org/8572
CVE-2001-0714
Sendmail before 8.12.1, without the RestrictQueueRun option enabled, allows local users to cause a denial of service (data loss) by (1) setting a high initial message hop count option (-h), which causes Sendmail to drop queue entries, (2) via the -qR option, or (3) via the -qS option.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sendmail
References: ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I, http://razor.bindview.com/publish/advisories/adv_sm812.html, ftp://patches.sgi.com/support/free/security/advisories/20011101-01-I
CVE-2001-1460
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postnuke
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html, http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html, http://www.kb.cert.org/vuls/id/921547
CVE-2001-0384
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: reliant_unix
References: http://www.securityfocus.com/archive/1/176709, http://www.securityfocus.com/bid/2606, http://www.securityfocus.com/archive/1/176709
CVE-2001-1310
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secureway_directory
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0297
Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: simple_server
References: http://www.securityfocus.com/archive/1/165523, http://www.securityfocus.com/bid/2415, http://www.securityfocus.com/archive/1/165523
CVE-2001-0619
The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to.  The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: orinoco
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0015.html
CVE-2001-0863
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.osvdb.org/1987
CVE-2001-1122
Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: http://www.securityfocus.com/archive/1/201722, http://www.securityfocus.com/bid/3144, https://exchange.xforce.ibmcloud.com/vulnerabilities/6943
CVE-2001-0417
Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: kerberos_5, kerberos
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0078.html, http://www.redhat.com/support/errata/RHSA-2001-025.html, http://archives.neohapsis.com/archives/bugtraq/2001-03/0078.html
CVE-2001-1323
Buffer overflow in MIT Kerberos 5 (krb5) 1.2.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via base-64 encoded data, which is not properly handled when the radix_encode function processes file glob output from the ftpglob function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kerberos_5
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-022-01, http://marc.info/?l=bugtraq&m=98826223517788&w=2, http://web.mit.edu/kerberos/www/advisories/ftpbuf.txt
CWE: CWE-120
CVE-2001-0804
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the "next" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: interactive_story
References: http://www.osvdb.org/683, http://www.securityfocus.com/archive/1/4.3.2.7.2.20010715184257.00b20100%40compumodel.com, http://www.securityfocus.com/bid/3028
CVE-2001-1499
Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vpn-1
References: http://www.osvdb.org/20210, http://www.securityfocus.com/archive/1/222366, http://www.securityfocus.com/archive/1/222479
CVE-2001-0960
Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: arcserve_backup_2000, arcserve_backup
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0137.html, http://support.ca.com/Download/patches/asitnt/QO00945.html, http://www.securityfocus.com/bid/3343
CVE-2001-0578
Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6293
CVE-2001-0952
THQ Volition Red Faction Game allows remote attackers to cause a denial of service (hang) of a client or server via packets to UDP port 7755.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: red_faction
References: http://marc.info/?l=bugtraq&m=100774266027774&w=2, http://www.securityfocus.com/bid/3651, https://exchange.xforce.ibmcloud.com/vulnerabilities/7672
CVE-2001-0981
HP CIFS/9000 Server (SAMBA) A.01.07 and earlier with the "unix password sync" option enabled calls the passwd program without specifying the username of the user making the request, which could cause the server to change the password of a different user.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cifs-9000_server
References: http://archives.neohapsis.com/archives/hp/2001-q3/0048.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/7051, http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
CVE-2001-0422
Buffer overflow in Xsun in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0158.html, http://www.securityfocus.com/bid/2561, https://exchange.xforce.ibmcloud.com/vulnerabilities/6343
CVE-2001-0668
Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q3/0047.html, http://www.cert.org/advisories/CA-2001-30.html, http://www.ciac.org/ciac/bulletins/l-134.shtml
CVE-2001-1079
create_keyfiles in PSSP 3.2 with DCE 3.1 authentication on AIX creates keyfile directories with world-writable permissions, which could allow a local user to delete key files and cause a denial of service.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2001-q3/0000.html, http://www.osvdb.org/5473, https://exchange.xforce.ibmcloud.com/vulnerabilities/8923
CVE-2001-0584
IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0365.html, http://www.securityfocus.com/bid/2508, https://exchange.xforce.ibmcloud.com/vulnerabilities/6279
CVE-2001-0370
fcheck prior to 2.57.59 calls the file signature checking program insecurely, which can allow a local user to run arbitrary commands via a file name that contains shell metacharacters.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fcheck
References: http://marc.info/?l=bugtraq&m=98521301510554&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6256, http://marc.info/?l=bugtraq&m=98521301510554&w=2
CVE-2001-0388
time server daemon timed allows remote attackers to cause a denial of service via malformed packets.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, freebsd, mandrake_linux
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:28.timed.asc, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-034.php3, http://www.novell.com/linux/security/advisories/2001_007_nkitserv.html
CVE-2001-1255
WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winmysqladmin, mysql
References: http://online.securityfocus.com/archive/1/217848, http://www.iss.net/security_center/static/7206.php, http://www.securityfocus.com/bid/3381
CVE-2001-1214
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unix_manual
References: http://www.iss.net/security_center/static/7719.php, http://www.kb.cert.org/vuls/id/672419, http://www.securityfocus.com/archive/1/247332
CVE-2001-1550
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: asp, smart_connect, centraone
References: http://archives.neohapsis.com/archives/ntbugtraq/2001-q4/0205.html, http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0072.html, http://www.securityfocus.com/bid/3704
CVE-2001-0796
SGI IRIX 6.5 through 6.5.12f and possibly earlier versions, and FreeBSD 3.0, allows remote attackers to cause a denial of service via a malformed IGMP multicast packet with a small response delay.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix, freebsd
References: ftp://patches.sgi.com/support/free/security/advisories/20011001-01-P, http://www.freebsd.org/cgi/query-pr.cgi?pr=8990, http://www.securityfocus.com/bid/3463
CVE-2001-0573
lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2001-q2/0000.html, http://www.kb.cert.org/vuls/id/123651, http://www.osvdb.org/5582
CVE-2001-1563
Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources.  NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tomcat, secure_os
References: http://archives.neohapsis.com/archives/hp/2001-q4/0062.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/42892, http://archives.neohapsis.com/archives/hp/2001-q4/0062.html
CVE-2001-1483
One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and static passphrases if the user account does exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: one-time_passwords_in_everything
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://www.securityfocus.com/archive/1/20011115221226.7C93E186B0%40atlas.dgp.toronto.edu, http://www.securityfocus.com/bid/3549, https://exchange.xforce.ibmcloud.com/vulnerabilities/7572
CWE: CWE-203
CVE-2001-1114
book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nc_book
References: http://www.securityfocus.com/archive/1/204094, http://www.securityfocus.com/bid/3178, https://exchange.xforce.ibmcloud.com/vulnerabilities/6986
CVE-2001-0806
Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mac_os_x
References: http://marc.info/?l=bugtraq&m=99358249631139&w=2, http://marc.info/?l=bugtraq&m=99436289015729&w=2, http://online.securityfocus.com/archive/1/219166
CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more command in smbclient, or (3) the mput command in smbclient.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: samba
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0305.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0319.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0326.html
CVE-2001-1452
By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000, windows_nt
Related CWEs: CWE-346
Related CAPECs: CAPEC-388, CAPEC-142, CAPEC-160
MITRE ATT&CK Techniques: T1134, T1539, T1550.004
MITRE ATT&CK Tactics: T1134, T1584, T1550
References: http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352, http://www.kb.cert.org/vuls/id/109475, http://www.securityfocus.com/bid/6791
CWE: CWE-346
MITRE ATT&CK techniques: T1134, T1539, T1550.004, T1557.002, T1134.001, T1584.002, T1528
MITRE ATT&CK tactics: T1134, T1584, T1550, T1557
CVE-2001-0953
Kebi WebMail allows remote attackers to access the administrator menu and gain privileges via the /a/ hidden directory, which is installed under the web document root.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kebi_community
References: http://marc.info/?l=bugtraq&m=100780264902037&w=2:1, http://www.securityfocus.com/bid/3655, https://exchange.xforce.ibmcloud.com/vulnerabilities/7674
CVE-2001-0961
Buffer overflow in tab expansion capability of the most program allows local or remote attackers to execute arbitrary code via a malformed file that is viewed with most.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: most
References: http://www.debian.org/security/2001/dsa-076, http://www.securityfocus.com/bid/3347, https://exchange.xforce.ibmcloud.com/vulnerabilities/7149
CVE-2001-0485
Unknown vulnerability in netprint in IRIX 6.2, and possibly other versions, allows local users with lp privileges attacker to execute arbitrary commands via the -n option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20010701-01-P, http://archives.neohapsis.com/archives/bugtraq/2001-04/0475.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0502.html
CVE-2001-1403
Bugzilla before 2.14 includes the username and password in URLs, which could allow attackers to gain privileges by reading the information from the web server logs, or by "shoulder-surfing" and observing the web browser's location bar.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=15980, http://marc.info/?l=bugtraq&m=99912899900567, http://www.redhat.com/support/errata/RHSA-2001-107.html
CVE-2001-0575
Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0404.html, http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6290
CVE-2001-1564
setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q3/0000.html, http://www.iss.net/security_center/static/6810.php, http://www.securityfocus.com/bid/3416
CVE-2001-1554
IBM AIX 430 does not properly unlock IPPMTU_LOCK, which allows remote attackers to cause a denial of service (hang) via Path Maximum Transmit Unit (PMTU) IP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2001-q4/0009.html, http://archives.neohapsis.com/archives/aix/2001-q4/0009.html
CVE-2001-0328
TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
References: ftp://patches.sgi.com/support/free/security/advisories/20030201-01-P, http://secunia.com/advisories/8044, http://securityreason.com/securityalert/57
CVE-2001-1348
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: twig
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html, http://twig.screwdriver.net/index.php3, http://www.iss.net/security_center/static/6619.php
CVE-2001-0116
gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: linux, immunix, mandrake_linux
References: http://marc.info/?l=bugtraq&m=97916374410647&w=2, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-006.php3, http://www.securityfocus.com/bid/2188
CVE-2001-0063
procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc, http://www.osvdb.org/1691, http://www.securityfocus.com/bid/2132
CVE-2001-1046
Buffer overflow in qpopper (aka qpop or popper) 4.0 through 4.0.2 allows remote attackers to gain privileges via a long username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: qpopper
References: http://archives.neohapsis.com/archives/linux/caldera/2001-q3/0006.html, http://marc.info/?l=vuln-dev&m=98777649031406&w=2, http://www.securityfocus.com/archive/1/188267
CVE-2001-1420
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a long filename, possibly caused by a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://www.kb.cert.org/vuls/id/972499, http://www.kb.cert.org/vuls/id/JARL-569MEK, http://www.securityfocus.com/archive/1/218920
CVE-2001-1305
ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web page with a Content-Type of application/x-icq, which is processed by Internet Explorer.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: icq
References: http://marc.info/?l=bugtraq&m=99851887024728&w=2, http://www.iss.net/security_center/static/7028.php, http://www.securityfocus.com/bid/3226
CVE-2001-0203
Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: firebox_ii
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0342.html, http://www.securityfocus.com/bid/2284, https://exchange.xforce.ibmcloud.com/vulnerabilities/5979
CVE-2001-0100
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bslist.cgi
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html, http://www.stanback.net/, https://exchange.xforce.ibmcloud.com/vulnerabilities/5797
CVE-2001-1328
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos
References: ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-2001.03, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/203, http://www.ciac.org/ciac/bulletins/l-103.shtml
CVE-2001-0132
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: interscan_viruswall
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html, http://www.securityfocus.com/bid/2213, http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html
CVE-2001-0545
IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server
References: http://www.ciac.org/ciac/bulletins/l-132.shtml, http://www.osvdb.org/5736, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-044
CVE-2001-1512
Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF and META-INF directories and execute arbitrary JavaServer Pages (JSP), a variant of CVE-2000-1050.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: jrun
References: http://www.iss.net/security_center/static/7677.php, http://www.macromedia.com/v1/handlers/index.cfm?ID=22287, http://www.securityfocus.com/bid/3662
CVE-2001-0915
Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pmake
References: http://marc.info/?l=bugtraq&m=100638919720975&w=2, http://www.iss.net/security_center/static/7602.php, http://www.securityfocus.com/bid/3572
CVE-2001-0498
Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oracle8i
References: http://www.nai.com/research/covert/advisories/049.asp, http://www.nai.com/research/covert/advisories/049.asp
CVE-2001-0664
Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=100281551611595&w=2, http://morph3us.org/blog/?p=31, http://www.osvdb.org/1971
CVE-2001-1128
Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: progress
References: http://www.securityfocus.com/archive/1/219174, http://www.securityfocus.com/bid/3414, https://exchange.xforce.ibmcloud.com/vulnerabilities/7264
CVE-2001-0357
FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: formmail
References: http://marc.info/?l=bugtraq&m=98433523520344&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/6242, http://marc.info/?l=bugtraq&m=98433523520344&w=2
CVE-2001-1266
Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dnhttpd
References: http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html, http://dnhttpd.sourceforge.net/changelog.html, http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0002.html
CVE-2001-1428
The (1) FTP and (2) Telnet services in Beck GmbH IPC@Chip are shipped with a default password, which allows remote attackers to gain unauthorized access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipc_at_chip_embedded-webserver
References: http://www.kb.cert.org/vuls/id/426459, http://www.kb.cert.org/vuls/id/46219, http://www.securityfocus.com/archive/1/186418
CVE-2001-1159
load_prefs.php and supporting include files in SquirrelMail 1.0.4 and earlier do not properly initialize certain PHP variables, which allows remote attackers to (1) view sensitive files via the config_php and data_dir options, and (2) execute arbitrary code by using options_order.php to upload a message that could be interpreted as PHP.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squirrelmail
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0029.html, http://www.iss.net/security_center/static/6775.php, http://www.securityfocus.com/bid/2968
CVE-2001-0971
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 4d_webserver
References: http://www.iss.net/security_center/static/7010.php, http://www.securityfocus.com/archive/1/206102, http://www.securityfocus.com/bid/3209
CVE-2001-1082
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: radius
References: http://freshmeat.net/releases/52020/, http://freshmeat.net/releases/52020/
CVE-2001-1446
Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html, http://www.kb.cert.org/vuls/id/177243, http://www.securityfocus.com/bid/3325
CVE-2001-0208
MicroFocus Cobol 4.1, with the AppTrack feature enabled, installs the mfaslmf directory and the nolicense file with insecure permissions, which allows local users to gain privileges by modifying files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cobol
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html, http://www.securityfocus.com/bid/2359, http://archives.neohapsis.com/archives/bugtraq/2001-02/0205.html
CVE-2001-0681
Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long (1) username or (2) password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: qvt_net, qvt_term
References: http://www.securityfocus.com/archive/1/176712, https://exchange.xforce.ibmcloud.com/vulnerabilities/6376, http://www.securityfocus.com/archive/1/176712
CVE-2001-0738
LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, immunix
References: http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-026-01, http://marc.info/?l=bugtraq&m=99258618906506&w=2, http://www.kb.cert.org/vuls/id/249579
CVE-2001-0187
Format string vulnerability in wu-ftp 2.6.1 and earlier, when running with debug mode enabled, allows remote attackers to execute arbitrary commands via a malformed argument that is recorded in a PASV port assignment.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd
References: ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_current/missing_format_strings.patch, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000443, http://www.debian.org/security/2001/dsa-016
CVE-2001-1252
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: keyserver
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html, http://www.iss.net/security_center/static/7203.php, http://www.osvdb.org/1955
CVE-2001-1069
libCoolType library as used in Adobe Acrobat (acroread) on Linux creates the AdobeFnt.lst file with world-writable permissions, which allows local users to modify the file and possibly modify acroread's behavior.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acrobat_reader
References: http://lists.debian.org/debian-security/2001/debian-security-200101/msg00085.html, http://marc.info/?l=bugtraq&m=99849121502399&w=2, http://www.securityfocus.com/bid/3225