DuyTa/cve-kgrag-db huggingface dataset:
CVE-2001-1096
Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aix
References: http://archives.neohapsis.com/archives/aix/2001-q4/0000.html, http://www.osvdb.org/5470, http://archives.neohapsis.com/archives/aix/2001-q4/0000.html
CVE-2001-1194
Zyxel Prestige 681 and 1600 SDSL Routers allow remote attackers to cause a denial of service via malformed packets with (1) an IP length less than actual packet size, or (2) fragmented packets whose size exceeds 64 kilobytes after reassembly.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: prestige_1600, prestige_681
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0140.html, http://archives.neohapsis.com/archives/bugtraq/2001-12/0190.html, http://www.securityfocus.com/bid/3695
CVE-2001-0611
Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: becky_internet_mail
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0089.html, http://www.securityfocus.com/bid/2723, https://exchange.xforce.ibmcloud.com/vulnerabilities/6531
CVE-2001-0219
Vulnerability in Support Tools Manager (xstm,cstm,stm) in HP-UX 11.11 and earlier allows local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q1/0016.html, http://www.osvdb.org/6991, http://www.osvdb.org/7029
CVE-2001-0473
Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux, immunix, mutt, linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0246.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000385, http://marc.info/?l=bugtraq&m=98473109630421&w=2
CVE-2001-0349
Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://www.kb.cert.org/vuls/id/587587, http://www.securityfocus.com/bid/2849, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031
CVE-2001-1253
Alexis 2.0 and 2.1 in COM2001 InternetPBX stores voicemail passwords in plain text in the com2001.ini file, which could allow local users to make long distance calls as other users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: alexis_server
References: http://online.securityfocus.com/archive/1/217200, http://www.iss.net/security_center/static/7205.php, http://online.securityfocus.com/archive/1/217200
CVE-2001-0867
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml, http://www.osvdb.org/1989
CVE-2001-1350
Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: namazu
References: http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b, http://search.namazu.org/ml/namazu-devel-ja/msg02114.html, http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b
CVE-2001-1517
RunAs (runas.exe) in Windows 2000 stores cleartext authentication information in memory, which could allow attackers to obtain usernames and passwords by executing a process that is allocated the same memory page after termination of a RunAs command.  NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it, and the original researcher did not respond to requests for additional information
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_2000
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0041.html, http://cert.uni-stuttgart.de/archive/bugtraq/2001/11/msg00100.html, http://www.iss.net/security_center/static/7531.php
CVE-2001-0556
The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: nedit
References: http://www.debian.org/security/2001/dsa-053, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-042.php3, http://www.nedit.org/archives/develop/2001-Feb/0391.html
CVE-2001-1307
Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: iplanet_directory_server
References: ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0594
kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0140.html, http://www.securityfocus.com/bid/2558, https://exchange.xforce.ibmcloud.com/vulnerabilities/6359
CVE-2001-1013
Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username does not exist, which could allow remote attackers to determine valid usernames on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux
References: http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0083.html, http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0087.html, http://archives.neohapsis.com/archives/vuln-dev/2000-q3/0094.html
CVE-2001-1437
easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easynews
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0000.html, http://www.kb.cert.org/vuls/id/597795, http://www.securityfocus.com/bid/3649
CVE-2001-0085
Buffer overflow in Kermit communications software in HP-UX 11.0 and earlier allows local users to cause a denial of service and possibly execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2000-q4/0083.html, http://www.securityfocus.com/bid/2170, https://exchange.xforce.ibmcloud.com/vulnerabilities/5793
CVE-2001-1188
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailto
References: http://www.securityfocus.com/archive/1/244909, http://www.securityfocus.com/bid/3669, http://www.securityfocus.com/archive/1/244909
CVE-2001-1546
Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by recovering the passwords from the pwhc.ini file.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pathways_homecare
Related CWEs: CWE-326
Related CAPECs: CAPEC-112, CAPEC-192, CAPEC-20
MITRE ATT&CK Techniques: T1110
References: http://www.iss.net/security_center/static/7682.php, http://www.securityfocus.com/archive/1/244367, http://www.securityfocus.com/bid/3653
CWE: CWE-326
MITRE ATT&CK techniques: T1110
CVE-2001-0433
Buffer overflow in Savant 3.0 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Host HTTP header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: savant_webserver
References: http://marc.info/?l=bugtraq&m=98655083231635&w=2, http://marc.info/?l=bugtraq&m=98655083231635&w=2
CVE-2001-1373
MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zonealarm
References: http://www.securityfocus.com/archive/1/197681, http://www.securityfocus.com/bid/3055, http://www.zonelabs.com/products/zap/rel_history.html#2.6.362
CVE-2001-1057
The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by connecting to port 16286 and not disconnecting, which prevents users from making license requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mathematica
References: http://www.securityfocus.com/archive/1/200462, http://www.securityfocus.com/bid/3120, https://exchange.xforce.ibmcloud.com/vulnerabilities/6926
CVE-2001-1401
Bugzilla before 2.14 does not properly restrict access to confidential bugs, which could allow Bugzilla users to bypass viewing permissions via modified bug id parameters in (1) process_bug.cgi, (2) show_activity.cgi, (3) showvotes.cgi, (4) showdependencytree.cgi, (5) showdependencygraph.cgi, (6) showattachment.cgi, or (7) describecomponents.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=39524, http://bugzilla.mozilla.org/show_bug.cgi?id=39526, http://bugzilla.mozilla.org/show_bug.cgi?id=39527
CVE-2001-0497
dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bind
Related CWEs: CWE-276
Related CAPECs: CAPEC-127, CAPEC-1, CAPEC-81
MITRE ATT&CK Techniques: T1083, T1574.010
MITRE ATT&CK Tactics: T1574
References: http://www.osvdb.org/5609, http://xforce.iss.net/alerts/advise78.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/6694
CWE: CWE-276
MITRE ATT&CK techniques: T1083, T1574.010
MITRE ATT&CK tactics: T1574
CVE-2001-1084
Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jrun
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html, http://www.kb.cert.org/vuls/id/654643, http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full
CVE-2001-1382
The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openssh
References: http://www.openwall.com/Owl/CHANGES-stable.shtml, http://www.osvdb.org/5408, http://www.openwall.com/Owl/CHANGES-stable.shtml
CVE-2001-0494
Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0433.html, http://ipswitch.com/Support/IMail/news.html, http://www.osvdb.org/5610
CVE-2001-1300
Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CWD) command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dynu_ftp_server
References: http://www.iss.net/security_center/static/7045.php, http://www.securiteam.com/windowsntfocus/5KP0N0A55M.html, http://www.iss.net/security_center/static/7045.php
CVE-2001-0462
Directory traversal vulnerability in Perl web server 0.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perl_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0426.html, http://www.securityfocus.com/bid/2648, https://exchange.xforce.ibmcloud.com/vulnerabilities/6451
CVE-2001-1333
Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: cups
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000384, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000386, http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html
CVE-2001-0559
crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vixie_cron
References: http://www.debian.org/security/2001/dsa-054, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-050.php3, http://www.novell.com/linux/security/advisories/2001_017_cron_txt.html
CVE-2001-1217
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_server
References: http://otn.oracle.com/deploy/security/pdf/modplsql.pdf, http://www.iss.net/security_center/static/7728.php, http://www.kb.cert.org/vuls/id/758483
CVE-2001-1385
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mandrake_linux, php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373, http://marc.info/?l=bugtraq&m=97957961212852, http://www.debian.org/security/2001/dsa-020
CVE-2001-1271
Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a ..  (dot dot) attack on archived filenames.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: rar
References: http://online.securityfocus.com/archive/1/196445, http://www.security.nnov.ru/advisories/archdt.asp, http://online.securityfocus.com/archive/1/196445
CVE-2001-1473
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssh
Related CWEs: CWE-310
References: http://www.kb.cert.org/vuls/id/684820, https://exchange.xforce.ibmcloud.com/vulnerabilities/6603, http://www.kb.cert.org/vuls/id/684820
CWE: CWE-310
CVE-2001-0506
Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_information_server, internet_information_services
References: http://marc.info/?l=bugtraq&m=99802093532233&w=2, http://online.securityfocus.com/archive/1/242541, http://www.ciac.org/ciac/bulletins/l-132.shtml
CVE-2001-0076
register.cgi in Ikonboard 2.1.7b and earlier allows remote attackers to execute arbitrary commands via the SEND_MAIL parameter, which overwrites an internal program variable that references a program to be executed.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ikonboard
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html, http://www.securityfocus.com/bid/2157, https://exchange.xforce.ibmcloud.com/vulnerabilities/5819
CVE-2001-1229
Buffer overflows in (1) Icecast before 1.3.9 and (2) libshout before 1.0.4 allow remote attackers to cause a denial of service (crash) and execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icecast, libshout
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000387, http://marc.info/?l=bugtraq&m=98438880622976&w=2, http://www.redhat.com/support/errata/RHSA-2002-063.html
CVE-2001-0757
Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 6400_nrp_2
References: http://www.ciac.org/ciac/bulletins/l-097.shtml, http://www.cisco.com/warp/public/707/6400-nrp2-telnet-vuln-pub.shtml, http://www.kb.cert.org/vuls/id/516659
CVE-2001-1459
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openssh
References: http://marc.info/?l=bugtraq&m=99324968918628&w=2, http://www.kb.cert.org/vuls/id/797027, http://www.securityfocus.com/bid/2917
CVE-2001-0861
Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 12000_router
References: http://www.ciac.org/ciac/bulletins/m-018.shtml, http://www.cisco.com/warp/public/707/GSR-unreachables-pub.shtml, http://www.osvdb.org/794
CVE-2001-0600
Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: domino_r5_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6347, http://archives.neohapsis.com/archives/bugtraq/2001-04/0174.html
CVE-2001-1301
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: xemacs, emacs
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0093.html, http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_with_tag=EMACS_PRETEST_21_0_95, http://www.iss.net/security_center/static/11210.php
CVE-2001-0109
rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0226.html, http://archives.neohapsis.com/archives/bugtraq/2001-01/0272.html, http://www.securityfocus.com/bid/2207
CVE-2001-0666
Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: exchange_server
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
References: http://www.securityfocus.com/bid/3368, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-049, https://exchange.xforce.ibmcloud.com/vulnerabilities/7168
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-2001-0319
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: net.commerce, net.commerce_hosting_server, websphere_commerce_suite
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0072.html, http://www-4.ibm.com/software/webservers/commerce/netcomletter.html, http://www.securityfocus.com/bid/2350
CVE-2001-1074
Webmin 0.84 and earlier does not properly clear the HTTP_AUTHORIZATION environment variable when the web server is restarted, which makes authentication information available to all CGI programs and allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webmin
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0262.html, http://www.calderasystems.com/support/security/advisories/CSSA-2001-019.1.txt, http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-059.php3
CVE-2001-0064
Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0315.html, http://www.securityfocus.com/bid/2134, http://archives.neohapsis.com/archives/bugtraq/2000-12/0315.html
CVE-2001-1219
Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://www.securityfocus.com/archive/1/246649, http://www.securityfocus.com/bid/3730, http://www.securityfocus.com/archive/1/246649
CVE-2001-0766
Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server, mac_os_x
Related CWEs: CWE-178
References: http://archives.neohapsis.com/archives/bugtraq/2001-06/0090.html, http://www.securityfocus.com/bid/2852, http://archives.neohapsis.com/archives/bugtraq/2001-06/0090.html
CWE: CWE-178
CVE-2001-1004
Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other clients by sharing a file whose name contains the script tags.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gnutella_client
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html, http://www.gnutelliums.com/linux_unix/gnut/ChangeLog.txt, http://archives.neohapsis.com/archives/bugtraq/2001-08/0415.html
CVE-2001-1187
csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: csvform, csvform_plus
References: http://online.securityfocus.com/archive/1/244908, http://www.iss.net/security_center/static/7692.php, http://www.securityfocus.com/bid/3668
CVE-2001-0463
Directory traversal vulnerability in cal_make.pl in PerlCal allows remote attackers to read arbitrary files via a .. (dot dot) in the p0 parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perlcal
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0506.html, http://www.perlcal.com/calendar/docs/bugs.txt, http://www.securityfocus.com/bid/2663
CVE-2001-1251
SmallHTTP 1.204 through 3.00 beta 8 allows remote attackers to cause a denial of service via multiple long URL requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vwebserver, small_http_server
References: http://online.securityfocus.com/archive/1/194418, http://www.iss.net/security_center/static/6771.php, http://www.securityfocus.com/bid/2980
CVE-2001-0200
HSWeb 2.0 HTTP server allows remote attackers to obtain the physical path of the server via a request to the /cgi/ directory, which will list the path if directory browsing is enabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hsweb
References: http://archives.neohapsis.com/archives/bugtraq/2001-02/0052.html, http://www.securityfocus.com/bid/2336, http://archives.neohapsis.com/archives/bugtraq/2001-02/0052.html
CVE-2001-0610
kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, kde
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6428, http://archives.neohapsis.com/archives/bugtraq/2001-04/0336.html
CVE-2001-0108
PHP Apache module 4.0.4 and earlier allows remote attackers to bypass .htaccess access restrictions via a malformed HTTP request on an unrestricted page that causes PHP to use those access controls on the next page that is requested.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mandrake_linux, php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000373, http://marc.info/?l=bugtraq&m=97957961212852, http://www.debian.org/security/2001/dsa-020
CVE-2001-0464
Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cyberscheduler
References: http://marc.info/?l=bugtraq&m=98761402029302&w=2, http://www.securityfocus.com/bid/2628, http://marc.info/?l=bugtraq&m=98761402029302&w=2
CVE-2001-0625
ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: inoculateit
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0245.html, http://www.osvdb.org/1843, http://www.securityfocus.com/bid/2778
CVE-2001-1530
run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webmin
References: http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html, http://www.securiteam.com/unixfocus/6R00M0K2UC.html, http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0015.html
CVE-2001-1304
Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long (1) user-agent or (2) host HTTP header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: shoutcast_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html, http://www.iss.net/security_center/static/6938.php, http://archives.neohapsis.com/archives/bugtraq/2001-08/0048.html
CVE-2001-1342
Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash) or other characters, which causes certain functions to dereference a null pointer.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://bugs.apache.org/index.cgi/full/7522, http://marc.info/?l=bugtraq&m=99054258728748&w=2, http://online.securityfocus.com/archive/1/176144
CVE-2001-1179
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x11r6
References: http://www.securityfocus.com/archive/1/197498, http://www.securityfocus.com/archive/1/197498
CVE-2001-0620
iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: calendar_server
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6402, http://archives.neohapsis.com/archives/bugtraq/2001-04/0320.html
CVE-2001-0869
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, linux, openlinux_eserver, linux_powertools, openlinux_workstation
References: ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:15.cyrus-sasl.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000444, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:018
CVE-2001-1488
Open Projects Network Internet Relay Chat (IRC) daemon u2.10.05.18 does not perform a double-reverse DNS lookup, which allows remote attackers to spoof any valid hostname on the Internet.  NOTE: a followup post suggests that this is not an issue in the daemon.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: open_projects_network_ircd
References: http://www.securityfocus.com/archive/1/219388/2003-04-27/2003-05-03/2, http://www.securityfocus.com/archive/1/220380, https://exchange.xforce.ibmcloud.com/vulnerabilities/7283
CVE-2001-1469
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ssh
References: http://www.kb.cert.org/vuls/id/25309, https://exchange.xforce.ibmcloud.com/vulnerabilities/6449, http://www.kb.cert.org/vuls/id/25309
CVE-2001-1519
RunAs (runas.exe) in Windows 2000 allows local users to create a spoofed named pipe when the service is stopped, then capture cleartext usernames and passwords when clients connect to the service.  NOTE: the vendor disputes this issue, saying that administrative privileges are already required to exploit it
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: windows_2000
References: http://online.securityfocus.com/archive/1/236111, http://online.securityfocus.com/archive/1/240136, http://www.iss.net/security_center/static/7532.php
CVE-2001-0630
Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: source_viewer
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0231.html, http://www.osvdb.org/5565, http://www.securityfocus.com/bid/2762
CVE-2001-1243
Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_information_server, internet_information_services
References: http://www.iss.net/security_center/static/6800.php, http://www.securityfocus.com/archive/1/194919, http://www.securityfocus.com/bid/2973
CVE-2001-0607
asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q1/0080.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5621, http://archives.neohapsis.com/archives/hp/2001-q1/0080.html
CVE-2001-1316
Buffer overflows in Teamware Office Enterprise Directory allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: teamware_office
References: http://ciac.llnl.gov/ciac/bulletins/l-116.shtml, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-1418
AOL Instant Messenger (AIM) 4.7 allows remote attackers to cause a denial of service (application crash) via a malformed WAV file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: instant_messenger
References: http://www.kb.cert.org/vuls/id/990451, http://www.kb.cert.org/vuls/id/JARL-569M8X, http://www.securityfocus.com/archive/1/218920
CVE-2001-0929
Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml, http://www.kb.cert.org/vuls/id/362483, http://www.osvdb.org/808
CVE-2001-0078
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cluster
References: http://archives.neohapsis.com/archives/bugtraq/2000-12/0180.html, http://www.osvdb.org/6437, https://exchange.xforce.ibmcloud.com/vulnerabilities/6125
CVE-2001-0177
WebMaster ConferenceRoom 1.8.1 allows remote attackers to cause a denial of service via a buddy relationship between the IRC server and a server clone.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: conferenceroom
References: http://www.securityfocus.com/archive/1/155388, http://www.securityfocus.com/bid/2178, https://exchange.xforce.ibmcloud.com/vulnerabilities/5909
CVE-2001-0188
GoodTech FTP server 3.0.1.2.1.0 and earlier allows remote attackers to cause a denial of service via a flood of connections to the server, which causes it to crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ftp_server_nt_2000, ftp_server_95_98
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0350.html, http://www.securityfocus.com/bid/2270, https://exchange.xforce.ibmcloud.com/vulnerabilities/5984
CVE-2001-0593
Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: clipper
References: http://anacondapartners.com/cgi-local/apexec.pl?template=ap_releasenotestemplate.html&f1=ap_af_updates_menu&f2=ap_af_releasenotes_clip, http://archives.neohapsis.com/archives/bugtraq/2001-03/0395.html, http://www.securityfocus.com/bid/2512
CVE-2001-0984
Password Safe 1.7(1) leaves cleartext passwords in memory when a user copies the password to the clipboard and minimizes Password Safe with the "Clear the password when minimized" and "Lock password database on minimize and prompt on restore" options enabled, which could allow an attacker with access to the memory (e.g. an administrator) to read the passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: password_safe
References: http://www.securityfocus.com/archive/1/213931, http://www.securityfocus.com/bid/3337, https://exchange.xforce.ibmcloud.com/vulnerabilities/7123
CVE-2001-0523
eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secureiis, securells
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0185.html, http://archives.neohapsis.com/archives/bugtraq/2001-05/0197.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/6563
CVE-2001-1181
Dynamically Loadable Kernel Module (dlkm) static kernel symbol table in HP-UX 11.11 is not properly configured, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://archives.neohapsis.com/archives/hp/2001-q3/0013.html, http://ciac.llnl.gov/ciac/bulletins/l-115.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/6861
CVE-2001-0453
Directory traversal vulnerability in BRS WebWeaver HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the (1) syshelp, (2) sysimages, or (3) scripts directories.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webweaver
References: http://archives.neohapsis.com/archives/bugtraq/2001-04/0519.html, http://members.nbci.com/_XMCM/BSoutham/WebWeaver/WebWeaverHistory.html, http://www.securityfocus.com/bid/2675
CVE-2001-1138
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: power_up_html
References: http://www.securityfocus.com/archive/1/212679, http://www.securityfocus.com/bid/3304, https://exchange.xforce.ibmcloud.com/vulnerabilities/7092
CVE-2001-1151
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: virus_buster, officescan
References: http://www.securityfocus.com/archive/1/220666, http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318, https://exchange.xforce.ibmcloud.com/vulnerabilities/7286
CVE-2001-0933
Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerftp
References: http://marc.info/?l=bugtraq&m=100698397818175&w=2, http://marc.info/?l=bugtraq&m=100698397818175&w=2
CVE-2001-1117
LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: befsr41
References: ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip, http://www.osvdb.org/1920, http://www.osvdb.org/5467
CVE-2001-0993
sendmsg function in NetBSD 1.3 through 1.5 allows local users to cause a denial of service (kernel trap or panic) via a msghdr structure with a large msg_controllen length.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd
References: http://archives.neohapsis.com/archives/netbsd/2001-q3/0102.html, http://www.osvdb.org/1910, http://www.securityfocus.com/bid/3088
CVE-2001-0231
Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: news_desk
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html, http://www.kb.cert.org/vuls/id/496064, http://www.securityfocus.com/bid/2172
CVE-2001-0009
Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: domino_server
References: http://www.osvdb.org/1703, http://www.securityfocus.com/archive/1/154537, http://www.securityfocus.com/archive/1/155124
CVE-2001-0110
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jazip
References: http://archives.neohapsis.com/archives/bugtraq/2001-01/0228.html, http://www.debian.org/security/2001/dsa-017, http://www.securityfocus.com/bid/2209
CVE-2001-1052
Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: empris
References: http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html, http://www.securityfocus.com/bid/3391, https://exchange.xforce.ibmcloud.com/vulnerabilities/7215
CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: allcommerce
References: http://www.linuxsecurity.com/advisories/other_advisory-1492.html, http://www.securityfocus.com/bid/3016, https://exchange.xforce.ibmcloud.com/vulnerabilities/6830
CVE-2001-1423
Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the logged_in parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: advanced_poll
References: http://securitytracker.com/id?1002516, http://www.kb.cert.org/vuls/id/140723, https://exchange.xforce.ibmcloud.com/vulnerabilities/7861
CVE-2001-1278
Zope before 2.2.4 allows partially trusted users to bypass security controls for certain methods by accessing the methods through the fmt attribute of dtml-var tags.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zope
References: http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-080.php3, http://www.redhat.com/support/errata/RHSA-2001-115.html, http://www.securityfocus.com/bid/3425
CVE-2001-0707
Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rshd
References: http://www.securityfocus.com/archive/1/183911, https://exchange.xforce.ibmcloud.com/vulnerabilities/6523, http://www.securityfocus.com/archive/1/183911
CVE-2001-1306
iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: iplanet_directory_server
References: ftp://patches.sgi.com/support/free/security/advisories/20011102-01-I, http://www.cert.org/advisories/CA-2001-18.html, http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/ldapv3/
CVE-2001-0585
Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ntmail
References: http://archives.neohapsis.com/archives/bugtraq/2001-03/0248.html, http://www.securityfocus.com/bid/2494, https://exchange.xforce.ibmcloud.com/vulnerabilities/6249
CVE-2001-1399
Certain operations in Linux kernel before 2.2.19 on the x86 architecture copy the wrong number of bytes, which might allow attackers to modify memory, aka "User access asm bug on x86."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=98575345009963&w=2, http://marc.info/?l=bugtraq&m=98637996127004&w=2, http://marc.info/?l=bugtraq&m=98653252326445&w=2