Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0904 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7581.php - http://marc.info/?l=bugtraq&m=100619268115798&w=2 - http://www.securityfocus.com/bid/3556
CVE ID: CVE-2001-0905 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6872 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:60.procmail.asc - http://www.securityfocus.com/bid/3071 - http://distro.conectiva.com.br/atualizacoes/?id=a&anunci
SA-01:60.procmail.asc - http://www.securityfocus.com/bid/3071 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000433 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-085.php3 - http://www.redhat.com/support/errata/RHSA-2001-093.html - http://www.debian.org/security/2001/dsa-083
CVE ID: CVE-2001-0906 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/192647 - http://www.securityfocus.com/bid/2974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6785 - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-030-01 - http://www.redhat.com/support/errata/RHSA-2001-102.html - http://www.linux-mandrake.com/e
/updates/IMNX-2001-70-030-01 - http://www.redhat.com/support/errata/RHSA-2001-102.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-086.php3
CVE ID: CVE-2001-0907 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:06.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.2.1 through 2.2.19, and 2.4.1 through 2.4.10, allows local users to cause a denial of service via a series of deeply nested symlinks, which causes the kernel to spend extra time when trying to access the link. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-036.0.txt - http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-035-01 - http://www.linuxsecurity.com/advisories/other_advisory-1650.html - http://marc.info/?l=bugtraq&m=100343
2001-70-035-01 - http://www.linuxsecurity.com/advisories/other_advisory-1650.html - http://marc.info/?l=bugtraq&m=100343090106914&w=2 - http://marc.info/?l=bugtraq&m=100350685431610&w=2 - http://www.novell.com/linux/security/advisories/2001_036_kernel_txt.html - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 - http://www.securityfocus.com/bid/3444 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2001:079 - http://www.iss.net/security_center/static/7312.php
CVE ID: CVE-2001-0908 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: CITRIX Metaframe 1.8 logs the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through Network Address Translation (NAT). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7538 - http://marc.info/?l=bugtraq&m=100638693315933&w=2 - http://www.securityfocus.com/bid/3566
CVE ID: CVE-2001-0909 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:07.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6802 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7605 - http://marc.info/?l=bugtraq&m=100638955422011&w=2
CVE ID: CVE-2001-0910 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Legato Networker before 6.1 allows remote attackers to bypass access restrictions and gain privileges on the Networker interface by spoofing the admin server name and IP address and connecting to Networker from an IP address whose hostname can not be determined by a DNS reverse lookup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7601 - http://marc.info/?l=bugtraq&m=100638782917917&w=2
CVE ID: CVE-2001-0911 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7596 - http://www.securityfocus.com/bid/3567 - http://marc.info/?l=bugtraq&m=100638850219503&w=2
CVE ID: CVE-2001-0912 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Packaging error for expect 8.3.3 in Mandrake Linux 8.1 causes expect to search for its libraries in the /home/snailtalk directory before other directories, which could allow a local user to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-087.php3?dis=8.1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7604
CVE ID: CVE-2001-0913 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Network Solutions Rwhoisd 1.5.7.2 and earlier, when using syslog, allows remote attackers to corrupt memory and possibly execute arbitrary code via a rwhois request that contains format specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100655265508104&w=2 - http://lists.research.netsol.com/pipermail/rwhois-announce/2001-November/000023.html
CVE ID: CVE-2001-0914 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:06.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.4.11pre3 in multiple Linux distributions allows local users to cause a denial of service (crash) by starting the core vmlinux kernel, possibly related to poor error checking during ELF loading. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100654787226869&w=2L:2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7591 - http://www.securityfocus.com/bid/3570 - http://marc.info/?l=bugtraq&m=100638584813349&w=2
CVE ID: CVE-2001-0915 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via format specifiers in the check argument of a shell definition. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100638919720975&w=2 - http://www.iss.net/security_center/static/7602.php - http://www.securityfocus.com/bid/3572
CVE ID: CVE-2001-0916 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Berkeley parallel make (pmake) 2.1.33 and earlier allows a local user to gain root privileges via a long check argument of a shell definition. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100638919720975&w=2 - http://www.securityfocus.com/bid/3573 - http://www.iss.net/security_center/static/7603.php
CVE ID: CVE-2001-0917 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=tomcat-dev&m=100658457507305&w=2 - http://marc.info/?l=bugtraq&m=100654722925155&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7599 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a
e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2001-0918 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in CGI scripts in susehelp in SuSE 7.2 and 7.3 allow remote attackers to execute arbitrary commands by not opening files securely. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2001_041_susehelp_txt.html - http://www.securityfocus.com/bid/3576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7583
CVE ID: CVE-2001-0919 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100679857614967&w=2
CVE ID: CVE-2001-0920 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in auto nice daemon (AND) 1.0.4 and earlier allows a local user to possibly execute arbitrary code via a process name containing a format string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100680319004162&w=2 - http://www.securityfocus.com/bid/3580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7606 - http://and.sourceforge.net/
CVE ID: CVE-2001-0921 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:37:07.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5524 - http://marc.info/?l=bugtraq&m=100638816318705&w=2 - http://www.securityfocus.com/bid/3565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7593
CVE ID: CVE-2001-0922 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by reading the SPIDERSESSION and uniqueValue variables from the login field, then using those variables after the next user logs in. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7620 - http://www.securityfocus.com/bid/3583 - http://marc.info/?l=bugtraq&m=100681274915525&w=2
CVE ID: CVE-2001-0923 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/222542 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7349 - http://www.securityfocus.com/bid/3472
CVE ID: CVE-2001-0924 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100688672019635&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7585 - http://www.securityfocus.com/bid/3575 - http://marc.info/?l=bugtraq&m=100654890029878&w=2
CVE ID: CVE-2001-0925 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/193081 - http://www.apacheweek.com/features/security-13 - http://www.securityfocus.com/archive/1/178066 - http://www.linuxse
81 - http://www.apacheweek.com/features/security-13 - http://www.securityfocus.com/archive/1/178066 - http://www.linuxsecurity.com/advisories/other_advisory-1452.html - http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-01-27&end=2002-02-02&mid=199857&threads=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6921 - http://www.securityfocus.com/archive/1/168497 - http://www.debian.org/security/2001/dsa-067 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-077.php3 - http://www.securityfocus.com/bid/2503 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.ht
449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2001-0926 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for Java server pages (.jsp) and other files in the web root via an HTTP request for a non-existent SSI page, in which the request's body has an #include statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/handlers/index.cfm?ID=22261&Method=Full - http://marc.info/?l=bugtraq&m=100697797325013&w=2 - http://www.securityfocus.com/bid/3589 - https://exchange.xforce.ibmcloud.com/vulnerabili
bugtraq&m=100697797325013&w=2 - http://www.securityfocus.com/bid/3589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7622
CVE ID: CVE-2001-0927 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitrary code via an argument that contains format specifiers that are passed into the (1) syslog_message and (2) syslog_io_message functions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100689302316077&w=2 - ftp://ftp.gnome.org/pub/GNOME/stable/sources/libgtop/libgtop-1.0.13.tar.gz - http://www.debian.org/security/2002/dsa-098
CVE ID: CVE-2001-0928 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/705771 - http://www.securityfocus.com/bid/3594 - http://www.debian.org/security/2003/dsa-301 - http://www.debian.org/security/2002/dsa-098 - http://marc.info/?l=bugtraq&m=100699007010203&w=2
CVE ID: CVE-2001-0929 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software, for IOS 11.2P through 12.2T does not properly check the IP protocol type, which could allow remote attackers to bypass access control lists. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7614 - http://www.kb.cert.org/vuls/id/362483 - http://www.securityfocus.com/bid/3588 - http://www.osvdb.org/808 - http://www.cisco.com/warp/public/707/IOS-cbac-dyna
- http://www.securityfocus.com/bid/3588 - http://www.osvdb.org/808 - http://www.cisco.com/warp/public/707/IOS-cbac-dynacl-pub.shtml
CVE ID: CVE-2001-0930 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7609.php - http://marc.info/?l=bugtraq&m=100689313216624&w=2
CVE ID: CVE-2001-0931 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7615 - http://www.securityfocus.com/bid/3593 - http://marc.info/?l=bugtraq&m=100698397818175&w=2
CVE ID: CVE-2001-0932 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:06.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cooolsoft PowerFTP Server 2.03 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3595 - http://marc.info/?l=bugtraq&m=100698397818175&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7616
CVE ID: CVE-2001-0933 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls (LIST) command that includes the drive letter as an argument, e.g. "ls C:". Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100698397818175&w=2
CVE ID: CVE-2001-0934 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cooolsoft PowerFTP Server 2.03 allows remote attackers to obtain the physical path of the server root via the pwd command, which lists the full pathname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100698397818175&w=2
CVE ID: CVE-2001-0935 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in wu-ftpd 2.6.0, and possibly earlier versions, which is unrelated to the ftpglob bug described in CVE-2001-0550. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2001_043_wuftpd_txt.html
CVE ID: CVE-2001-0936 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:06.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Frox transparent FTP proxy 0.6.6 and earlier, with the local caching method selected, allows remote FTP servers to run arbitrary code via a long response to an MDTM request. Additional Analyst Notes: - CVE Program Container: References: - http://frox.sourceforge.net/security.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/7632 - http://marc.info/?l=bugtraq&m=100713367307799&w=2 - http://www.securityfocus.com/bid/3606
CVE ID: CVE-2001-0937 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/82/243262 - http://marc.info/?l=bugtraq&m=100714269114686&w=2
CVE ID: CVE-2001-0938 State: PUBLISHED Published: 2002-02-02T05:00:00 Last Updated: 2024-08-08T04:37:07.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100715294425985&w=2 - http://www.iss.net/security_center/static/7628.php - http://www.iss.net/security_center/static/7629.php - http://www.securityfocus.com/bid/3608
CVE ID: CVE-2001-0939 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:37:07.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino 5.08 and earlier allows remote attackers to cause a denial of service (crash) via a SunRPC NULL command to port 443. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3607 - http://www-1.ibm.com/support/manager.wss?rs=0&rt=0&org=sims&doc=4C8E450DBF2E7F1885256B200079FA88 - http://www.osvdb.org/1998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7631 - http://marc.info/?l=bugtraq&m=100715316426817&w=2