Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0834 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2001/dsa-080 - http://www.calderasystems.com/support/security/advi
ntainer: References: - http://www.debian.org/security/2001/dsa-080 - http://www.calderasystems.com/support/security/advisories/CSSA-2001-035.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000429 - http://www.securityfocus.com/bid/3410 - http://www.novell.com/linux/security/advisories/2001_035_htdig_txt.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7263 - http://marc.info/?l=bugtraq&m=100260195401753&w=2 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-083.php3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7262 - http://sourceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593 - http://www.redhat.com/support/errata/
urceforge.net/tracker/index.php?func=detail&aid=458013&group_id=4593&atid=104593 - http://www.redhat.com/support/errata/RHSA-2001-139.html
CVE ID: CVE-2001-0835 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:07.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3473 - http://www.mrunix.net/webalizer/news.html - http://www.redhat.com/support/errata/RHSA-2001-141.html - http://lists.suse.com/archives/suse-secur
ebalizer/news.html - http://www.redhat.com/support/errata/RHSA-2001-141.html - http://lists.suse.com/archives/suse-security-announce/2001-Nov/0001.html - http://www.linuxsecurity.com/advisories/other_advisory-1677.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7350 - http://www.redhat.com/support/errata/RHSA-2001-140.html - http://marc.info/?l=bugtraq&m=100394630702875&w=2
CVE ID: CVE-2001-0836 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7306 - http://www.cert.org/advisories/CA-2001-29.html - http://otn.oracle.com/deploy/security/pdf/webcache.pdf - http://www.osvdb.org/5534 - http://marc.info/?l=bugtraq&m=100395487007578&w=2 - http://www.kb.cert.org/vuls/id/649979 - http://marc.info/?l=bugtraq&m=100342151132277&w=2
CVE ID: CVE-2001-0837 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:37:06.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7393 - http://marc.info/?l=bugtraq&m=100403691432052&w=2
CVE ID: CVE-2001-0838 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100402652724815&w=2
CVE ID: CVE-2001-0839 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7352 - http://marc.info/?l=bugtraq&m=100404371423927&w=2
CVE ID: CVE-2001-0840 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/908611 - http://www.compaq.com/products/servers/management/mgtsw-advisory.html - http://www.iss.net/security_center/static/7411.php - http://www.securityfocus.com/bid/3482
CVE ID: CVE-2001-0841 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3486 - http://marc.info/?l=bugtraq&m=100446445208739&w=2 - http://www.iss.net/security_center/static/7433.php
CVE ID: CVE-2001-0842 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100446455809273&w=2 - http://www.iss.net/security_center/static/7436.php - http://www.securityfocus.com/bid/3484
CVE ID: CVE-2001-0843 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid proxy server 2.4 and earlier allows remote attackers to cause a denial of service (crash) via a mkdir-only FTP PUT request. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-113.html - http://marc.info/?l=bugtraq&m=100109679010256&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7157 - http://www.debian.org/security/2001/dsa-077 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-088.php3 - http://www.securityfocus.com/bid/3354 - http://archi
ttp://www.linux-mandrake.com/en/security/2001/MDKSA-2001-088.php3 - http://www.securityfocus.com/bid/3354 - http://archives.neohapsis.com/archives/linux/conectiva/2001-q3/0020.html - http://www.novell.com/linux/security/advisories/2001_037_squid_txt.html
CVE ID: CVE-2001-0844 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in (1) Book of guests and (2) Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3483 - http://marc.info/?l=bugtraq&m=100446263601021&w=2 - http://www.iss.net/security_center/static/7435.php - http://www.securityfocus.com/bid/3485 - http://www.iss.net/security_center/static/7434.php
CVE ID: CVE-2001-0845 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7425 - http://ftp.support.compaq.com/patches/.new/html/SSRT0738.shtml - http://www.securityfocus.com/bid/3492
CVE ID: CVE-2001-0846 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino 5.x allows remote attackers to read files or execute arbitrary code by requesting the ReplicaID of the Web Administrator template file (webadmin.ntf). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/1979 - http://www.iss.net/security_center/static/7424.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/7424 - http://marc.info/?l=bugtraq&m=100448721830960&w=2
CVE ID: CVE-2001-0847 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3488 - http://marc.info/?l=bugtraq&m=100448726831108&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7423
CVE ID: CVE-2001-0848 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100463832209281&w=2 - http://www.securityfocus.com/bid/3496 - http://www.iss.net/security_center/static/7445.php
CVE ID: CVE-2001-0849 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: viralator CGI script in Viralator 0.9pre1 and earlier allows remote attackers to execute arbitrary code via a URL for a file being downloaded, which is insecurely passed to a call to wget. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100463639800515&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7440 - http://www.securityfocus.com/bid/3495 - http://viralator.loddington.com/changes.html
CVE ID: CVE-2001-0850 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:07.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7427 - http://www.caldera.com/support/security/advisories/CSSA-2001-037.0.txt
CVE ID: CVE-2001-0851 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-082.php3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7461 - http://www.novell.com/linux/security/advisories/2001_039_kernel2_txt.html - http://www.redhat.com/support/errata/RHSA-2001-142.html - http://www.linuxsecurity.com/advisories/other_advisory-1683.html
p://www.redhat.com/support/errata/RHSA-2001-142.html - http://www.linuxsecurity.com/advisories/other_advisory-1683.html - http://www.caldera.com/support/security/advisories/CSSA-2001-038.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000432
CVE ID: CVE-2001-0852 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7464 - http://marc.info/?l=bugtraq&m=100498100112191&w=2 - http://marc.info/?l=tux-list&m=100584714702328&w=2 - http://www.redhat.com/support/errata/RHSA-2001-142.html - http://www.securityfocus.com/bid/3506
CVE ID: CVE-2001-0853 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-11/0022.html - http://marc.info/?l=bugtraq&m=100498111712723&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7474 - http://www.securityfocus.com/bid/3508 - http://www.kb.cert.org/vuls/id/243243
CVE ID: CVE-2001-0854 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100525739116093&w=2 - http://www.securityfocus.com/bid/3510 - http://www.iss.net/security_center/static/7478.php
CVE ID: CVE-2001-0855 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3523 - http://www.iss.net/security_center/static/7488.php - http://marc.info/?l=bugtraq&m=100528623328037&w=2
CVE ID: CVE-2001-0856 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Common Cryptographic Architecture (CCA) in IBM 4758 allows an attacker with physical access to the system and Combine_Key_Parts permissions, to steal DES and 3DES keys by using a brute force attack to create a 3DES exporter key. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100533053219673&w=2 - http://www.cl.cam.ac.uk/~rnc1/descrack/attack.html - http://www.securityfocus.com/bid/3524 - http://www.cl.cam.ac.uk/~rnc1/descrack/
CVE ID: CVE-2001-0857 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7496 - http://marc.info/?l=bugtraq&m=100535679608486&w=2 - http://www.caldera.com/support/security/advisories/CSSA-2001-039.0.txt - http://m
nfo/?l=bugtraq&m=100535679608486&w=2 - http://www.caldera.com/support/security/advisories/CSSA-2001-039.0.txt - http://marc.info/?l=bugtraq&m=100540578822469&w=2 - http://www.osvdb.org/668 - http://www.securityfocus.com/bid/3525
CVE ID: CVE-2001-0858 State: PUBLISHED Published: 2001-11-22T05:00:00 Last Updated: 2024-08-08T04:37:06.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.32/ - http://marc.info/?l=bugtraq&m=100562386012917&w=2 - http://www.iss.net/security_center/static/7570.php
CVE ID: CVE-2001-0859 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2.4.3-12 kernel in Red Hat Linux 7.1 Korean installation program sets the setting default umask for init to 000, which installs files with world-writeable permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-148.html - http://www.securityfocus.com/bid/3527 - http://online.securityfocus.com/advisories/3725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7549
CVE ID: CVE-2001-0860 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7538 - http://marc.info/?l=bugtraq&m=100578220002083&w=2 - http://www.securityfocus.com/bid/3541
CVE ID: CVE-2001-0861 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 and earlier allows remote attackers to cause a denial of service (CPU consumption) by flooding the router with traffic that generates a large number of ICMP Unreachable replies. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/7536 - http://www.osvdb.org/794 - http://www.cisco.com/warp/public/707/GSR-unreachables-pub.shtml - http://www.securityfocus.com
ttp://www.osvdb.org/794 - http://www.cisco.com/warp/public/707/GSR-unreachables-pub.shtml - http://www.securityfocus.com/bid/3534
CVE ID: CVE-2001-0862 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not block non-initial packet fragments, which allows remote attackers to bypass the ACL. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.osvdb.org/1985 - http://www.securityfocus.com/bid/3535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7550
CVE ID: CVE-2001-0863 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not handle the "fragment" keyword in a compiled ACL (Turbo ACL) for packets that are sent to the router, which allows remote attackers to cause a denial of service via a flood of fragments. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.osvdb.org/1987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7551 - http://www.security
-pub.shtml - http://www.osvdb.org/1987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7551 - http://www.securityfocus.com/bid/3539
CVE ID: CVE-2001-0864 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly handle the implicit "deny ip any any" rule in an outgoing ACL when the ACL contains exactly 448 entries, which can allow some outgoing packets to bypass access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.osvdb.org/1986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7553 - http://www.securityfoc
b.shtml - http://www.osvdb.org/1986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7553 - http://www.securityfocus.com/bid/3536
CVE ID: CVE-2001-0865 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not support the "fragment" keyword in an outgoing ACL, which could allow fragmented packets in violation of the intended access. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.securityfocus.com/bid/3540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7552 - http://www.osvdb.org/1988
CVE ID: CVE-2001-0866 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.iss.net/security_center/static/7554.php - http://www.securityfocus.com/bid/3537 - http://w
SR-ACL-pub.shtml - http://www.iss.net/security_center/static/7554.php - http://www.securityfocus.com/bid/3537 - http://www.osvdb.org/1984
CVE ID: CVE-2001-0867 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:37:06.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco 12000 with IOS 12.0 and line cards based on Engine 2 does not properly filter does not properly filter packet fragments even when the "fragment" keyword is used in an ACL, which allows remote attackers to bypass the intended access controls. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-018.shtml - http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml - http://www.securityfocus.com/bid/3538 - http://www.osvdb.org/1989 - https://exchange.xforce.ibmcloud.com/vulnerab
html - http://www.securityfocus.com/bid/3538 - http://www.osvdb.org/1989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7555