Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1344 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:07.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by (1) inserting a null character or (2) .. (dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html - http://www.securityfocus.com/bid/2860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6685
CVE ID: CVE-2001-1345 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:51:07.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: bctool in Jetico BestCrypt 0.7 and earlier trusts the user-supplied PATH to find and execute an fsck utility program, which allows local users to gain privileges by modifying the PATH to point to a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-06/0005.html - http://www.securityfocus.com/bid/2820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6648 - http://www.jetico.com/index.htm#/linux.htm
CVE ID: CVE-2001-1346 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates ARCserveIT 6.61 and 6.63 (also called ARCservIT) allows local users to overwrite arbitrary files via a symlink attack on the temporary files (1) asagent.tmp or (2) inetd.tmp. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-05/0184.html - http://www.securityfocus.com/bid/2748 - http://www.securityfocus.com/bid/2741
CVE ID: CVE-2001-1347 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000 allows local users to cause a denial of service and possibly gain privileges by setting a hardware breakpoint that is handled using global debug registers, which could cause other processes to terminate due to an exception, and allow hijacking of resources such as named pipes. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6590.php - http://www.securityfocus.com/bid/2764 - http://archives.neohapsis.com/archives/bugtraq/2001-05/0232.html
CVE ID: CVE-2001-1348 State: PUBLISHED Published: 2002-05-03T04:00:00 Last Updated: 2024-08-08T04:51:08.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2791 - http://twig.screwdriver.net/index.php3 - http://www.iss.net/security_center/static/6619.php - http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html
CVE ID: CVE-2001-1349 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2794 - http://www.securityfocus.com/archive/1/187127 - http://archives.neohapsis.com/archives/sendmail/2001-q2/0001.html - http://www.iss.net/security_center/static/6633.php - http://rhn.redhat.com/errata/RHSA-2001-106.html - http://razor.
l - http://www.iss.net/security_center/static/6633.php - http://rhn.redhat.com/errata/RHSA-2001-106.html - http://razor.bindview.com/publish/advisories/adv_sm8120.html
CVE ID: CVE-2001-1350 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in namazu.cgi for Namazu 2.0.7 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b - http://search.namazu.org/ml/namazu-devel-ja/msg02114.html
CVE ID: CVE-2001-1351 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Namazu 2.0.8 and earlier allows remote attackers to execute arbitrary Javascript as other web users via the index file name that is displayed when displaying hit numbers. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b - https://exchange.xforce.ibmcloud.com/vulnerabilities/7875 - http://www.osvdb.org/5690
CVE ID: CVE-2001-1352 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Namazu 2.0.9 and earlier allows remote attackers to execute arbitrary Javascript as other web users via an error message that is returned when an invalid index file is specified in the idxname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101068116016472&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7875 - http://www.osvdb.org/5691 - http://marc.info/?l=bugtraq&m=100947261916155&w=2 - http://marc.info/?l=bugtraq&m=101
7875 - http://www.osvdb.org/5691 - http://marc.info/?l=bugtraq&m=100947261916155&w=2 - http://marc.info/?l=bugtraq&m=101060476404565&w=2
CVE ID: CVE-2001-1353 State: PUBLISHED Published: 2002-06-05T04:00:00 Last Updated: 2024-08-08T04:51:08.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: ghostscript before 6.51 allows local users to read and write arbitrary files as the 'lp' user via the file operator, even with -dSAFER enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-138.html - http://marc.info/?l=lprng&m=100083210910857&w=2 - http://archives.neohapsis.com/archives/hp/2001-q4/0069.html - http://rhn.redhat.com/errata/RHSA-2001-112.html
CVE ID: CVE-2001-1354 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetWin Authentication module (NWAuth) 2.0 and 3.0b, as implemented in SurgeFTP, DMail, and possibly other packages, uses weak password hashing, which could allow local users to decrypt passwords or use a different password that has the same hash value as the correct password. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6866 - http://www.securityfocus.com/bid/3075 - http://online.securityfocus.com/archive/1/198293
CVE ID: CVE-2001-1355 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3077 - http://online.securityfocus.com/archive/1/198293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6865
CVE ID: CVE-2001-1356 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetWin SurgeFTP 2.0f and earlier encrypts passwords using weak hashing, a fixed salt value and modulo 40 calculations, which allows remote attackers to conduct brute force password guessing attacks against the administrator account on port 7021. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6961.php - http://online.securityfocus.com/archive/1/201951 - http://www.securityfocus.com/bid/3157
CVE ID: CVE-2001-1357 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpheaven.net/projects/phpMyChat/changes.php3
CVE ID: CVE-2001-1358 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L (localization) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpheaven.net/projects/phpMyChat/changes.php3
CVE ID: CVE-2001-1359 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6672 - http://www.securityfocus.com/bid/2850 - http://www.caldera.com/support/security/advisories/CSSA-2001-021.0.txt
CVE ID: CVE-2001-1360 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.mostang.com/pub/sane/sane-1.0.8/sane-backends-1.0.8.tar.gz - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html
CVE ID: CVE-2001-1361 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto links. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://twig.screwdriver.net/file.php3?file=CHANGELOG
CVE ID: CVE-2001-1362 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the server for nPULSE before 0.53p4. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://freshmeat.net/releases/51981/
CVE ID: CVE-2001-1363 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://phpwebsite.appstate.edu/downloads/0.7.9/phpWebSite-en-0.7.9.tar.gz
CVE ID: CVE-2001-1364 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - ftp://ftp.earth.li/pub/projectpurple/autodns-0.0.4.tar.gz
CVE ID: CVE-2001-1365 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in IntraGnat before 1.4. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://archives.neohapsis.com/archives/apps/freshmeat/2001-07/0011.html
CVE ID: CVE-2001-1366 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://netscript.sourceforge.net/netscript-1.6.2.tgz
CVE ID: CVE-2001-1367 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:51:08.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html - http://phpslice.org/comments.php?aid=1031& - https://exchange.xforce.ibmcloud.com/vulnerabilities/9649
CVE ID: CVE-2001-1368 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corrupt data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6697 - http://archives.neohapsis.com/archives/hp/2001-q2/0059.html
CVE ID: CVE-2001-1369 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3319 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:14.pam-pgsql.asc - http://www.iss.net/security_center/static/7110.php
CVE ID: CVE-2001-1370 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410 - http://www.debian.org/security/2001/dsa-073 - http://online.securityfocus.com/arch
r/atualizacoes/?id=a&anuncio=000410 - http://www.debian.org/security/2001/dsa-073 - http://online.securityfocus.com/archive/1/198495 - http://www.iss.net/security_center/static/6892.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt - http://www.securityfocus.com/archive/1/198768 - http://marc.info/?l=bugtraq&m=99616122712122&w=2 - http://www.securityfocus.com/bid/3079
CVE ID: CVE-2001-1371 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101301813117562&w=2 - http://www.cert.org/advisories/CA-2002-08.html - http://www.nextgenss.com/papers/hpoas.pdf - http://www.kb.cert.org/vuls/id/736923 - http://www.securityfocus.com/bid/4289 - http://technet.oracle.com/deploy/securit
http://www.kb.cert.org/vuls/id/736923 - http://www.securityfocus.com/bid/4289 - http://technet.oracle.com/deploy/security/pdf/ias_soap_alert.pdf - http://www.iss.net/security_center/static/8449.php
CVE ID: CVE-2001-1372 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a non-existent .JSP file, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-08.html - http://www.securityfocus.com/bid/3341 - http://marc.info/?l=bugtraq&m=100119633925473&w=2 - http://www.kb.cert.org/vuls/id/278971 - http://marc.info/?l=bugtraq&m=100074087824021&w=2 - http://otn.oracle.com/dep
- http://www.kb.cert.org/vuls/id/278971 - http://marc.info/?l=bugtraq&m=100074087824021&w=2 - http://otn.oracle.com/deploy/security/pdf/jspexecute_alert.pdf - http://www.nii.co.in/research.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7135
CVE ID: CVE-2001-1373 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, which allows remote attackers to send potentially dangerous attachments. Additional Analyst Notes: - CVE Program Container: References: - http://www.zonelabs.com/products/zap/rel_history.html#2.6.362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6877 - http://www.securityfocus.com/archive/1/197681 - http://www.securityfocus.com/bid/3055
CVE ID: CVE-2001-1374 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3074 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060 - http://www.redhat.com/support/errata/RHSA-2002-148.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187 - https://exchange.xforce.ibmcloud.com/vulner
2002-148.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=22187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6870 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28224 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409
CVE ID: CVE-2001-1375 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:060 - http://www.iss.net/security_center/static/6869.php - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28226 - http://www.redhat.com/support/errata/RHSA-
tatic/6869.php - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=28226 - http://www.redhat.com/support/errata/RHSA-2002-148.html - http://www.securityfocus.com/bid/3073 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000409
CVE ID: CVE-2001-1376 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-030.html - http://online.securityfocus.com/archive/1/239784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7534 - http://www.kb.cert.org/vuls/id/589523 - http://marc.info/?l=bugtraq&m=101537153021792&w=2 - http://arch
abilities/7534 - http://www.kb.cert.org/vuls/id/589523 - http://marc.info/?l=bugtraq&m=101537153021792&w=2 - http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html - http://www.securityfocus.com/bid/3530 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 - http://www.cert.org/advisories/CA-2002-06.html
CVE ID: CVE-2001-1377 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T04:51:08.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-030.html - http://www.iss.net/security_center/static/8354.php - http://www.kb.cert.org/vuls/id/936683 - http://marc.info/?l=bugtraq&m=101537153021792&w=2 - http://archives.neohapsis.com/archives/linux/su
org/vuls/id/936683 - http://marc.info/?l=bugtraq&m=101537153021792&w=2 - http://archives.neohapsis.com/archives/linux/suse/2002-q2/0362.html - http://www.securityfocus.com/bid/4230 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000466 - http://www.cert.org/advisories/CA-2002-06.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc
CVE ID: CVE-2001-1378 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:51:08.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-103.html - http://lists.ccil.org/pipermail/fetchmail-announce/2001-March/000015.html
CVE ID: CVE-2001-1379 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T04:51:08.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentication and execute arbitrary SQL via a SQL injection attack on the user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3251 - http://rhn.redhat.com/errata/RHSA-2001-124.html - http://marc.info/?l=bugtraq&m=99911895901812&w=2 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.asc - http://archives.neoha
1812&w=2 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:03.mod_auth_pgsql.asc - http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0040.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000427 - http://www.securityfocus.com/bid/3253 - http://www.iss.net/security_center/static/7054.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/7059