DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-0366
saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: saposcol, sap_r_3_web_application_server_demo
References: ftp://ftp.sap.com/pub/linuxlab/saptools/README.saposcol, http://www.securityfocus.com/archive/1/180498, http://www.securityfocus.com/bid/2662
CVE-2001-0838
Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rwhoisd
References: http://marc.info/?l=bugtraq&m=100402652724815&w=2, http://marc.info/?l=bugtraq&m=100402652724815&w=2
CVE-2001-0710
NetBSD 1.5 and earlier and FreeBSD 4.3 and earlier allows a remote attacker to cause a denial of service by sending a large number of IP fragments to the machine, exhausting the mbuf pool.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd, freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:52.fragment.asc, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-006.txt.asc, http://www.securityfocus.com/bid/2799
CVE-2001-1422
WinVNC 3.3.3 and earlier generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winvnc
References: http://www.kb.cert.org/vuls/id/303080, http://www.securityfocus.com/bid/2275, http://www1.corest.com/common/showdoc.php?idxseccion=10&idx=117
CVE-2001-0147
Buffer overflow in Windows 2000 event viewer snap-in allows attackers to execute arbitrary commands via a malformed field that is improperly handled during the detailed view of event records.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-013, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-013
CVE-2001-0908
CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: metaframe
References: http://marc.info/?l=bugtraq&m=100638693315933&w=2, http://www.securityfocus.com/bid/3566, https://exchange.xforce.ibmcloud.com/vulnerabilities/7538
CVE-2001-1245
Opera 5.0 for Linux does not properly handle malformed HTTP headers, which allows remote attackers to cause a denial of service, possibly with a header whose value is the same as a MIME header name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: opera_web_browser
References: http://online.securityfocus.com/archive/1/196980, http://www.iss.net/security_center/static/6838.php, http://www.securityfocus.com/bid/3012
CVE-2001-1470
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ssh
References: http://www.kb.cert.org/vuls/id/315308, https://exchange.xforce.ibmcloud.com/vulnerabilities/6472, http://www.kb.cert.org/vuls/id/315308
CVE-2001-0115
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=97934312727101&w=2, http://marc.info/?l=bugtraq&m=97957435729702&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/200&type=0&nav=sec.sba
CVE-2001-0189
Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: localweb2000
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0346.html, http://www.securityfocus.com/bid/2268, https://exchange.xforce.ibmcloud.com/vulnerabilities/5982
CVE-2001-0054
Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. (dot dot) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: serv-u_file_server
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0043.html, http://marc.info/?l=bugtraq&m=97604119024280&w=2, http://www.osvdb.org/464
CWE: CWE-22
CVE-2001-0331
Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20010501-01-P, http://www.kb.cert.org/vuls/id/258632, http://www.osvdb.org/1822
CVE-2001-1205
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: last_lines
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=100975978324723&w=2, http://www.securityfocus.com/bid/3754, http://marc.info/?l=bugtraq&m=100975978324723&w=2
CWE: CWE-22
CVE-2001-0360
Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ikonboard
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0124.html, http://www.securityfocus.com/bid/2471, https://exchange.xforce.ibmcloud.com/vulnerabilities/6216
CVE-2001-0712
The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/archive/1/200109, http://www.securityfocus.com/archive/1/200291, http://www.securityfocus.com/bid/3116
CVE-2001-0476
Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aspseek
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0233.html, http://www.aspseek.org/changes.html, http://www.securityfocus.com/bid/2492
CVE-2001-0634
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: chilisoft
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html, http://www.securityfocus.com/bid/2409
CVE-2001-0790
Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the server to consume CPU while preparing alerts.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: specter_ids
References: http://archives.neohapsis.com/archives/win2ksecadvice/2001-q2/0071.html, http://archives.neohapsis.com/archives/win2ksecadvice/2001-q2/0071.html
CVE-2001-0976
Vulnerability in HP Process Resource Manager (PRM) C.01.08.2 and earlier, as used by HP-UX Workload Manager (WLM), allows local users to gain root privileges via modified libraries or environment variables.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: process_resource_manager
References: http://archives.neohapsis.com/archives/hp/2001-q3/0048.html, http://archives.neohapsis.com/archives/hp/2001-q3/0048.html
CVE-2001-1464
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: crystal_reports
References: http://www.kb.cert.org/vuls/id/403307, https://exchange.xforce.ibmcloud.com/vulnerabilities/7928, http://www.kb.cert.org/vuls/id/403307
CVE-2001-0800
lpsched in IRIX 6.5.13f and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20011003-02-P, http://www.lsd-pl.net/files/get?IRIX/irx_lpsched2, http://www.securityfocus.com/bid/27566
CVE-2001-0541
Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://www.securityfocus.com/archive/1/187001, http://www.securityfocus.com/bid/3105, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-042
CVE-2001-0613
Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omnihttpd
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0131.html, http://www.securityfocus.com/bid/2730, https://exchange.xforce.ibmcloud.com/vulnerabilities/6540
CVE-2001-0398
The BAT! mail client allows remote attackers to bypass user warnings of an executable attachment and execute arbitrary commands via an attachment whose file name contains many spaces, which also causes the BAT!  to misrepresent the attachment's type with a different icon.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: the_bat
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html, http://www.securityfocus.com/bid/2530, http://archives.neohapsis.com/archives/bugtraq/2001-04/0013.html
CVE-2001-0994
Marconi ForeThought 7.1 allows remote attackers to cause a denial of service by causing both telnet sessions to be locked via unusual input (e.g., from a port scanner), which prevents others from logging into the device.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: forethought
References: http://www.securityfocus.com/archive/1/211956, http://www.securityfocus.com/bid/3286, https://exchange.xforce.ibmcloud.com/vulnerabilities/7082
CVE-2001-0606
Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: virtualvault, iplanet_web_server
References: http://archives.neohapsis.com/archives/hp/2001-q1/0041.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6110, http://archives.neohapsis.com/archives/hp/2001-q1/0041.html
CVE-2001-1263
telnet95.exe in Pragma InterAccess 4.0 build 5 allows remote attackers to cause a denial of service (crash) via a large number of characters to port 23, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: interaccess
References: http://online.securityfocus.com/archive/1/189327, http://www.securityfocus.com/bid/2834, https://exchange.xforce.ibmcloud.com/vulnerabilities/6658
CVE-2001-1416
Multiple cross-site scripting (XSS) vulnerabilities in the log messages in certain Alpha versions of AOL Instant Messenger (AIM) 4.4 allow remote attackers to execute arbitrary web script or HTML via an image in the (1) DATA, (2) STYLE, or (3) BINARY tags.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: instant_messenger
References: http://www.kb.cert.org/vuls/id/541384, http://www.kb.cert.org/vuls/id/JARL-56TPBQ, http://www.windowsitpro.com/Articles/Index.cfm?ArticleID=19811&DisplayTab=Article
CVE-2001-0286
Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html
CVE-2001-0862
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.osvdb.org/1985
CVE-2001-0552
ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tivoli_netview, openview_network_node_manager
References: http://marc.info/?l=bugtraq&m=99201278704545&w=2, http://www.cert.org/advisories/CA-2001-24.html, http://www.kb.cert.org/vuls/id/952171
CVE-2001-0931
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerftp
References: http://marc.info/?l=bugtraq&m=100698397818175&w=2, http://www.securityfocus.com/bid/3593, https://exchange.xforce.ibmcloud.com/vulnerabilities/7615
CVE-2001-1526
Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: easynews
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html, http://www.iss.net/security_center/static/7658.php, http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html
CVE-2001-0352
SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or (2) ap128bWepKeyValue in the ap128bWEPKeyTable in the Symbol MIB.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 3crwe747a, 41x1_access_point
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/6232, https://exchange.xforce.ibmcloud.com/vulnerabilities/6232
CVE-2001-0509
Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, sql_server, windows_nt, exchange_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A82, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-041
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2001-0124
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=97908386502156&w=2, http://www.securityfocus.com/bid/2179, https://exchange.xforce.ibmcloud.com/vulnerabilities/5913
CVE-2001-0478
Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html, http://www.securityfocus.com/bid/2642, http://archives.neohapsis.com/archives/bugtraq/2001-04/0396.html
CVE-2001-0879
Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, sql_server, windows_nt, windows_xp
References: http://marc.info/?l=bugtraq&m=100891252317406&w=2, http://www.atstake.com/research/advisories/2001/a122001-1.txt, http://www.securityfocus.com/bid/3732
CVE-2001-1477
The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tuxedo
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp, https://exchange.xforce.ibmcloud.com/vulnerabilities/6326, http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp
CVE-2001-0471
SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
References: http://www.securityfocus.com/archive/1/160648, http://www.securityfocus.com/bid/2345, http://www.securityfocus.com/archive/1/160648
CVE-2001-0888
Atmel Firmware 1.3 Wireless Access Point (WAP) allows remote attackers to cause a denial of service via a SNMP request with (1) a community string other than "public" or (2) an unknown OID, which causes the WAP to deny subsequent SNMP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firmware, wap11, me102
References: http://marc.info/?l=bugtraq&m=100895903202798&w=2, http://www.securityfocus.com/bid/3734, https://exchange.xforce.ibmcloud.com/vulnerabilities/7734
CVE-2001-1099
The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: norton_antivirus, exchange_server
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://www.securityfocus.com/archive/1/212724, http://www.securityfocus.com/archive/1/213762, http://www.securityfocus.com/bid/3305
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2001-0075
Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: technote
References: http://www.securityfocus.com/archive/1/153212, http://www.securityfocus.com/bid/2156, http://www.securityfocus.com/archive/1/153212
CVE-2001-0465
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: turbo_tax
References: http://marc.info/?l=bugtraq&m=98653594732053&w=2, http://www.turbotax.com/atr/update/, https://exchange.xforce.ibmcloud.com/vulnerabilities/6622
CVE-2001-0126
Oracle XSQL servlet 1.0.3.0 and earlier allows remote attackers to execute arbitrary Java code by redirecting the XSQL server to another source via the xml-stylesheet parameter in the xslt stylesheet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oracle8i
References: http://marc.info/?l=bugtraq&m=97906670012796&w=2, http://marc.info/?l=bugtraq&m=98027700625521&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/5905
CVE-2001-1467
mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: expect
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0173.html, http://archives.neohapsis.com/archives/bugtraq/2001-04/0192.html, http://securitytracker.com/id?1001303
CVE-2001-1132
Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420, http://www.osvdb.org/5455, https://exchange.xforce.ibmcloud.com/vulnerabilities/7091
CVE-2001-0945
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook_express
References: http://marc.info/?l=bugtraq&m=100741295502017&w=2, http://www.iss.net/security_center/static/7648.php, http://www.securityfocus.com/bid/3611
CVE-2001-1524
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://online.securityfocus.com/archive/1/245691, http://online.securityfocus.com/archive/1/245875, http://online.securityfocus.com/archive/82/243545
CVE-2001-0789
Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kaspersky_anti-virus
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0274.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0274.html
CVE-2001-0913
Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rwhoisd
References: http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html, http://marc.info/?l=bugtraq&m=100655265508104&w=2, http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html
CVE-2001-0733
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eperl
References: http://www.securityfocus.com/archive/1/192711, http://www.securityfocus.com/bid/2912, https://exchange.xforce.ibmcloud.com/vulnerabilities/6743
CVE-2001-1288
Windows 2000 and Windows NT allows local users to cause a denial of service (reboot) by executing a command at the command prompt and pressing the F7 and enter keys several times while the command is executing, possibly related to an exception handling error in csrss.exe.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_nt
References: http://marc.info/?l=bugtraq&m=99640583014377&w=2, http://marc.info/?l=vuln-dev&m=99651044701417&w=2, http://online.securityfocus.com/archive/1/200118
CVE-2001-1197
klprfax_filter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kdeutils
References: http://marc.info/?l=bugtraq&m=100837486611350&w=2, http://www.securityfocus.com/archive/1/245500, http://www.securityfocus.com/bid/3694
CVE-2001-0890
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sane
References: http://rhn.redhat.com/errata/RHSA-2001-171.html, http://www.iss.net/security_center/static/7714.php, http://www.securityfocus.com/bid/3987
CVE-2001-0427
Cisco VPN 3000 series concentrators before 2.5.2(F) allow remote attackers to cause a denial of service via a flood of invalid login requests to (1) the SSL service, or (2) the telnet service, which do not properly disconnect the user after several failed login attempts.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: vpn_3060_concentrator, vpn_3000_concentrator, vpn_3080_concentrator, vpn_3030_concentator, vpn_3005_concentrator
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.cisco.com/warp/public/707/vpn3k-telnet-vuln-pub.shtml, http://www.osvdb.org/5643, https://exchange.xforce.ibmcloud.com/vulnerabilities/6298
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2001-1456
Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gauntlet_firewall, webshield_smtp, mcafee_e-ppliance, e-ppliance_300, irix
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I, http://www.cert.org/advisories/CA-2001-25.html, http://www.kb.cert.org/vuls/id/206723
CWE: CWE-119
CVE-2001-1143
IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: db2_universal_database
References: http://www.iss.net/security_center/static/6832.php, http://www.iss.net/security_center/static/6833.php, http://www.securityfocus.com/archive/1/196140
CVE-2001-1393
Unknown vulnerability in classifier code for Linux kernel before 2.2.19 could result in denial of service (hang).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2
CVE-2001-0538
Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: outlook
References: http://marc.info/?l=bugtraq&m=99496431214078&w=2, http://www.ciac.org/ciac/bulletins/l-113.shtml, http://www.kb.cert.org/vuls/id/131569
CVE-2001-1380
OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01, http://marc.info/?l=bugtraq&m=100154541809940&w=2
CVE-2001-0889
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exim, linux
References: http://marc.info/?l=bugtraq&m=100877978506387&w=2, http://www.debian.org/security/2002/dsa-097, http://www.kb.cert.org/vuls/id/283723
CVE-2001-0323
The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment (DF) set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
References: http://marc.info/?l=bugtraq&m=97958349623450&w=2, http://www.mandriva.com/security/advisories?name=MDVSA-2013:150, http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
CVE-2001-0049
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soho_firewall
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0079.html, http://www.securityfocus.com/bid/2082, https://exchange.xforce.ibmcloud.com/vulnerabilities/5665
CVE-2001-1280
POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html, http://www.ipswitch.com/Support/IMail/news.html, http://www.securityfocus.com/bid/3424
CVE-2001-0906
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: tetex
References: http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3, http://www.redhat.com/support/errata/RHSA-2001-102.html
CVE-2001-0555
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a ..  (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: siteware
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html, http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html, http://www.kb.cert.org/vuls/id/795707
CVE-2001-0551
Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q2/0044.html, http://www.kb.cert.org/vuls/id/860296, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5958
CVE-2001-1094
NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netop_school
References: http://www.securityfocus.com/archive/1/213516, http://www.securityfocus.com/bid/3321, https://exchange.xforce.ibmcloud.com/vulnerabilities/7120
CVE-2001-1585
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: openssh
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0159.html, http://online.securityfocus.com/bid/2356, http://www.openbsd.org/advisories/ssh_bypass.txt
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2001-0596
Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: communicator
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000393, http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-014-01, http://marc.info/?l=bugtraq&m=98685237415117&w=2
CVE-2001-0602
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_r5_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6348, http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE-2001-1176
Format string vulnerability in Check Point VPN-1/FireWall-1 4.1 allows a remote authenticated firewall administrator to execute arbitrary code via format strings in the control connection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: provider-1, vpn-1, firewall-1
References: http://archives.neohapsis.com/archives/bugtraq/2001-07/0209.html, http://www.checkpoint.com/techsupport/alerts/format_strings.html, http://www.osvdb.org/1901
CVE-2001-0977
slapd in OpenLDAP 1.x before 1.2.12, and 2.x before 2.0.8, allows remote attackers to cause a denial of service (crash) via an invalid Basic Encoding Rules (BER) length field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, mandrake_linux, mandrake_linux_corporate_server, linux, openldap
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000417, http://www.cert.org/advisories/CA-2001-18.html, http://www.debian.org/security/2001/dsa-068
CVE-2001-0437
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dcforum_2000, dcforum
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0269.html, http://www.dcscripts.com/FAQ/sec_2001_03_31.html, http://www.securityfocus.com/bid/2611
CVE-2001-0787
LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux
References: http://www.ciac.org/ciac/bulletins/l-096.shtml, http://www.redhat.com/support/errata/RHSA-2001-077.html, http://www.securityfocus.com/bid/2865
CVE-2001-0400
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nph-maillist
References: http://www.securityfocus.com/archive/1/175506, http://www.securityfocus.com/bid/2563, http://www.securityfocus.com/archive/1/175506
CVE-2001-0974
Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_directory
References: http://www.cert.org/advisories/CA-2001-18.html, http://www.ciac.org/ciac/bulletins/l-116.shtml, http://www.kb.cert.org/vuls/id/869184
CVE-2001-0019
Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: arrowpoint, content_services_switch
References: http://www.atstake.com/research/advisories/2001/a013101-1.txt, http://www.cisco.com/warp/public/707/arrowpoint-cli-filesystem-pub.shtml, http://www.atstake.com/research/advisories/2001/a013101-1.txt
CVE-2001-0622
The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: content_services_switch_11000
References: http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml, http://www.osvdb.org/1848, http://www.securityfocus.com/bid/2806
CVE-2001-0379
Vulnerability in the newgrp program included with HP9000 servers running HP-UX 11.11 allows a local attacker to obtain higher access rights.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q1/0101.html, http://www.kb.cert.org/vuls/id/249224, http://www.osvdb.org/5681
CVE-2001-1262
Avaya Argent Office 2.1 compares a user-provided SNMP community string with the correct string only up to the length of the user-provided string, which allows remote attackers to bypass authentication with a 0 length community string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: argent_office
References: http://online.securityfocus.com/archive/1/202344, http://www.iss.net/security_center/static/6955.php, http://online.securityfocus.com/archive/1/202344
CVE-2001-1504
Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is automatically executed when the user processes the e-mail message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_notes
References: http://www.securityfocus.com/archive/1/221986, http://www.securityfocus.com/archive/1/222212, http://www.securityfocus.com/bid/3458
CVE-2001-1163
Buffer overflow in Munica Corporation NetSQL 1.0 allows remote attackers to execute arbitrary code via a long CONNECT argument to port 6500.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netsql
References: http://www.securityfocus.com/bid/2885, http://www.securityfocus.com/bid/2885
CVE-2001-0081
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ncipher
References: http://active.ncipher.com/updates/advisory.txt, http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.html, http://www.osvdb.org/4849
CVE-2001-0062
procfs in FreeBSD and possibly other operating systems allows local users to cause a denial of service by calling mmap on the process' own mem file, which causes the kernel to hang.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc, http://www.osvdb.org/1698, http://www.osvdb.org/6082
CVE-2001-1070
Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mas_200
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0312.html, http://www.securityfocus.com/bid/3221, https://exchange.xforce.ibmcloud.com/vulnerabilities/7020
CVE-2001-0061
procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's address space.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:77.procfs.v1.1.asc, http://www.osvdb.org/1697, http://www.securityfocus.com/bid/2130
CVE-2001-0569
Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zope
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000382, http://www.debian.org/security/2001/dsa-043, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-025.php3
CVE-2001-1038
Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sn_5420_storage_router_firmware
References: http://www.ciac.org/ciac/bulletins/l-112.shtml, http://www.cisco.com/warp/public/707/SN-kernel-pub.html, http://www.osvdb.org/1899
CVE-2001-0281
Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.html, http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.html
CVE-2001-0822
FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fpf_linux_kernel_module
References: http://marc.info/?l=bugtraq&m=99167206319643&w=2, http://www.pkcrew.org/news.php, http://www.securityfocus.com/bid/2816
CVE-2001-1419
AOL Instant Messenger (AIM) 4.7.2480 and earlier allows remote attackers to cause a denial of service (application crash) via an instant message that contains a large amount of "<!--" HTML comments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: trillian, instant_messenger
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0014.html, http://www.kb.cert.org/vuls/id/507771, http://www.kb.cert.org/vuls/id/JARL-56TPTN
CVE-2001-0390
IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: net.commerce, websphere_application_server, net.commerce_hosting_server
References: http://www.securityfocus.com/archive/1/176100, http://www.securityfocus.com/bid/2588, http://www.securityfocus.com/archive/1/176100
CVE-2001-1020
edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: directory_manager
References: http://archives.neohapsis.com/archives/bugtraq/2001-09/0013.html, http://sourceforge.net/project/shownotes.php?release_id=51589, http://www.securityfocus.com/bid/3288
CVE-2001-0304
Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://marc.info/?l=bugtraq&m=98229372610440&w=2, http://www.securityfocus.com/bid/2384, http://marc.info/?l=bugtraq&m=98229372610440&w=2
CVE-2001-0561
Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: a1stats
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html, http://www.kb.cert.org/vuls/id/471691, http://www.securityfocus.com/bid/2705
CVE-2001-0936
Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: frox
References: http://frox.sourceforge.net/security.txt, http://marc.info/?l=bugtraq&m=100713367307799&w=2, http://www.securityfocus.com/bid/3606