Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1123 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Network Node Manager (NNM) 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/782155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7222 - http://www.securityfocus.com/advisories/3723 - http://www.securityfocus.com/advisories/3585 - http://www.securityfocus.com/bid/3399
CVE ID: CVE-2001-1124 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpcbind in HP-UX 11.00, 11.04 and 11.11 allows remote attackers to cause a denial of service (core dump) via a malformed RPC portmap requests, possibly related to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-003.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/7221 - http://www.securityfocus.com/advisories/3586 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5683 - http://www.securityfocus.com/bid/34
val.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5683 - http://www.securityfocus.com/bid/3400
CVE ID: CVE-2001-1125 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2025-01-16T17:04:41.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/218717 - http://www.securityfocus.com/bid/3403 - http://www.sarc.com/avcenter/security/Content/2001.10.05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7235
CVE ID: CVE-2001-1126 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3413 - http://www.securityfocus.com/archive/1/218717 - http://www.sarc.com/avcenter/security/Content/2001.10.05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7235
CVE ID: CVE-2001-1127 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Progress database 8.3D and 9.1C could allow a local user to execute arbitrary code via (1) _proapsv, (2) _mprosrv, (3) _mprshut, (4) orarx, (5) sqlcpp, (6) _probrkr, (7) _sqlschema and (8) _sqldump. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/218833 - http://www.securityfocus.com/bid/3404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7236
CVE ID: CVE-2001-1128 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Progress database 8.3D and 9.1C allows local users to execute arbitrary code via long entries in files that are specified by the (1) PROMSGS or (2) PROTERMCAP environment variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7264 - http://www.securityfocus.com/archive/1/219174
CVE ID: CVE-2001-1129 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in (1) _probuild, (2) _dbutil, (3) _mprosrv, (4) _mprshut, (5) _proapsv, (6) _progres, (7) _proutil, (8) _rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7457 - http://www.securityfocus.com/archive/1/224395 - http://www.securityfocus.com/bid/3502
CVE ID: CVE-2001-1130 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer (from the HTTP_REFERER variable) to point to the directory that contains the keylist.txt file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7003 - http://www.securityfocus.com/archive/1/201216 - http://www.novell.
//exchange.xforce.ibmcloud.com/vulnerabilities/7003 - http://www.securityfocus.com/archive/1/201216 - http://www.novell.com/linux/security/advisories/2001_027_sdb_txt.html
CVE ID: CVE-2001-1131 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5RP0L0055O.html
CVE ID: CVE-2001-1132 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailman 2.0.x before 2.0.6 allows remote attackers to gain access to list administrative pages when there is an empty site or list password, which is not properly handled during the call to the crypt function during authentication. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7091 - http://www.osvdb.org/5455
CVE ID: CVE-2001-1133 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in a system call in BSDI 3.0 and 3.1 allows local users to cause a denial of service (reboot) in the kernel via a particular sequence of instructions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3220 - http://www.iss.net/security_center/static/7023.php - http://www.securityfocus.com/archive/1/209192
CVE ID: CVE-2001-1134 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox DocuPrint N40 Printers allow remote attackers to cause a denial of service via malformed data, such as that produced by the Code Red worm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/203025 - http://www.securityfocus.com/bid/3170 - http://www.securityfocus.com/archive/1/198381 - http://www.iss.net/security_center/static/6976.php
CVE ID: CVE-2001-1135 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL Prestige 642R and 642R-I routers do not filter the routers' Telnet and FTP ports on the external WAN interface from inside access, allowing someone on an internal computer to reconfigure the router, if the password is known. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/203592 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7146 - http://www.securityfocus.com/archive/1/203022 - http://www.securityfocus.com/archive/1/214971 - http://www.securityfocus.com/bid
ww.securityfocus.com/archive/1/203022 - http://www.securityfocus.com/archive/1/214971 - http://www.securityfocus.com/bid/3346 - http://www.securityfocus.com/archive/1/204439
CVE ID: CVE-2001-1136 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libsecurity library in HP-UX 11.04 (VVOS) allows attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/l-143.shtml - http://archives.neohapsis.com/archives/hp/2001-q3/0063.html - http://www.securityfocus.com/bid/3338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7124
CVE ID: CVE-2001-1137 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DI-704 Internet Gateway firmware earlier than V2.56b6 allows remote attackers to cause a denial of service (reboot) via malformed IP datagram fragments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3306 - http://www.securityfocus.com/archive/1/212532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7090
CVE ID: CVE-2001-1138 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/212679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7092 - http://www.securityfocus.com/bid/3304
CVE ID: CVE-2001-1139 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3219 - http://www.iss.net/security_center/static/7015.php - http://www.securityfocus.com/archive/1/209414 - http://www.tsc.ant.co.jp/products/download.htm
CVE ID: CVE-2001-1140 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/209545 - http://www.securityfocus.com/bid/3222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7021
CVE ID: CVE-2001-1141 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pseudo-Random Number Generator (PRNG) in SSLeay and OpenSSL before 0.9.6b allows attackers to use the output of small PRNG requests to determine the internal state information, which could be used by attackers to predict future pseudo-random numbers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3004 - http://www.securityfocus.com/advisories/3475 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerab
/ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-013.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/6823 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-065.php3?dis=8.0 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000418 - http://www.securityfocus.com/archive/1/195829 - http://www.redhat.com/support/errata/RHSA-2001-051.html - http://www.osvdb.org/853 - http://www.linuxsecurity.com/advisories/other_advisory-1483.html
CVE ID: CVE-2001-1142 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6848.php - http://www.securityfocus.com/archive/1/196968 - http://www.securityfocus.com/bid/3029
CVE ID: CVE-2001-1143 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 7.0 allows a remote attacker to cause a denial of service (crash) via a single byte to (1) db2ccs.exe on port 6790, or (2) db2jds.exe on port 6789. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/196140 - http://www.securityfocus.com/bid/3010 - http://www.iss.net/security_center/static/6833.php - http://www.iss.net/security_center/static/6832.php
CVE ID: CVE-2001-1144 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3020 - http://www.securityfocus.com/archive/1/196272 - http://www.kb.cert.org/vuls/id/190267 - http://www.iss.net/security_center/static/6834.php - http://www.osvdb.org/584 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558
CVE ID: CVE-2001-1145 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:44:08.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the directory above the current directory is moved, which could cause scripts to perform dangerous actions on the wrong directories. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:40.fts.v1.1.asc - http://www.osvdb.org/5466 - http://www.securityfocus.com/bid/3205 - http://www.openb
ies/FreeBSD-SA-01:40.fts.v1.1.asc - http://www.osvdb.org/5466 - http://www.securityfocus.com/bid/3205 - http://www.openbsd.org/errata28.html - http://archives.neohapsis.com/archives/netbsd/2001-q3/0204.html - http://www.iss.net/security_center/static/8715.php
CVE ID: CVE-2001-1146 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 creates temporary files with predictable names, which allows local users to modify files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.linuxsecurity.com/advisories/other_advisory-1492.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6830 - http://www.securityfocus.com/bid/3016
CVE ID: CVE-2001-1147 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PAM implementation in /bin/login of the util-linux package before 2.11 causes a password entry to be rewritten across multiple PAM calls, which could provide the credentials of one user to a different user, when used in certain PAM modules such as pam_limits. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7266.php - http://www.ciac.org/ciac/bulletins/m-009.shtml - http://www.redhat.com/support/errata/RHSA-2001-132.html - http://www.novell.com/linux/security/adviso
tins/m-009.shtml - http://www.redhat.com/support/errata/RHSA-2001-132.html - http://www.novell.com/linux/security/advisories/2001_034_shadow_txt.html - http://www.securityfocus.com/bid/3415 - http://www.securityfocus.com/archive/1/219175 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-084.php3
CVE ID: CVE-2001-1148 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/82/191216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7281 - http://www.securityfocus.com/archive/1/219966
CVE ID: CVE-2001-1149 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda Antivirus Platinum before 6.23.00 allows a remore attacker to cause a denial of service (crash) when a user selects an action for a malformed UPX packed executable file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/82/209328 - http://www.osvdb.org/5456
CVE ID: CVE-2001-1150 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7014.php - http://www.securityfocus.com/archive/1/210087 - http://www.securityfocus.com/archive/1/209375 - http://www.securityfocus.com/bid/3216
CVE ID: CVE-2001-1151 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:08.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password. Additional Analyst Notes: - CVE Program Container: References: - http://www.trendmicro.co.jp/esolution/solutionDetail.asp?solutionID=318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7286 - http://www.securityfocus.com/archive/1/220666
CVE ID: CVE-2001-1152 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including (1) a // (double slash), (2) a /SUBDIR/.. where the desired file is in the parentdir, (3) a /./, or (4) URL-encoded characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.mimesweeper.com/support/technotes/notes/1043.asp - http://www.securityfocus.com/archive/1/212283 - http://www.sec
://www.mimesweeper.com/support/technotes/notes/1043.asp - http://www.securityfocus.com/archive/1/212283 - http://www.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3296
CVE ID: CVE-2001-1153 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:08.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-08/0391.html - http://www.securityfocus.com/bid/3248 - http://www.iss.net/security_center/static/7041.php
CVE ID: CVE-2001-1154 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7053 - http://www.securityfocus.com/archive/1/211056 - http://www.securityfocus.com/bid/3260
CVE ID: CVE-2001-1155 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5454 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:56.tcp_wrappers.asc
CVE ID: CVE-2001-1156 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPSoft FTP 0.95 allows remote attackers to cause a denial of service (CPU consumption) via a "../../*" argument to (1) STOR or (2) RETR. Additional Analyst Notes: - CVE Program Container: References: - http://membres.lycos.fr/typsoft/eng/history.html - http://www.securityfocus.com/archive/1/219167 - http://www.securityfocus.com/bid/3409 - http://www.iss.net/security_center/static/7247.php
CVE ID: CVE-2001-1157 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baltimore Technologies WEBsweeper 4.0 and 4.02 does not properly filter Javascript from HTML pages, which could allow remote attackers to bypass the filtering via (1) an extra leading < and one or more characters before the SCRIPT tag, or (2) tags using Unicode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/203821 - http://www.securityfocus.com/bid/3172 - http://www.securityfocus.com/bid/3173
CVE ID: CVE-2001-1158 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point VPN-1/FireWall-1 4.1 base.def contains a default macro, accept_fw1_rdp, which can allow remote attackers to bypass intended restrictions with forged RDP (internal protocol) headers to UDP port 259 of arbitrary hosts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2952 - http://archives.neohapsis.com/archives/bugtraq/2001-07/0128.html - http://www.checkpoint.com/techsupport/alerts/rdp.html - http://www.kb.cert.org/vuls/id/310295 - http://www.cert.org/advisories/CA-2
checkpoint.com/techsupport/alerts/rdp.html - http://www.kb.cert.org/vuls/id/310295 - http://www.cert.org/advisories/CA-2001-17.html - http://ciac.llnl.gov/ciac/bulletins/l-109.shtml - http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-11&end=2002-03-17&mid=195647&threads=1 - http://www.osvdb.org/1884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6815