Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0286 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0457.html
CVE ID: CVE-2001-0287 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0528.html - http://seer.support.veritas.com/docs/234326.htm - http://www.osvdb.org/6025
CVE ID: CVE-2001-0288 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml
CVE ID: CVE-2001-0289 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joe text editor 2.8 searches the current working directory (CWD) for the .joerc configuration file, which could allow local users to gain privileges of other users by placing a Trojan Horse .joerc file into a directory, then waiting for users to execute joe from that directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-024.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0490.html - http://www.debian.org/security/2001/dsa-041 - http://www.linux-
hives.neohapsis.com/archives/bugtraq/2001-02/0490.html - http://www.debian.org/security/2001/dsa-041 - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-026.php3
CVE ID: CVE-2001-0290 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Mailman 2.0.1 and earlier allows list administrators to obtain user passwords. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0031.html
CVE ID: CVE-2001-0291 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in post-query sample CGI program allows remote attackers to execute arbitrary commands via an HTTP POST request that contains at least 10001 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-03/0003.html
CVE ID: CVE-2001-0292 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html
CVE ID: CVE-2001-0293 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0508.html - http://www.securityfocus.com/bid/2426
CVE ID: CVE-2001-0294 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0511.html
CVE ID: CVE-2001-0295 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/874 - http://support.jgaa.com/?cmd=ShowArticle&ID=31 - http://marc.info/?l=bugtraq&m=98390925726814&w=2 - http://www.securityfocus.com/bid/2444
CVE ID: CVE-2001-0296 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0531.html
CVE ID: CVE-2001-0297 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/165523 - http://www.securityfocus.com/bid/2415
CVE ID: CVE-2001-0298 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/165671 - http://www.securityfocus.com/bid/2425
CVE ID: CVE-2001-0299 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Voyager web administration server for Nokia IP440 allows local users to cause a denial of service, and possibly execute arbitrary commands, via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2054 - http://www.osvdb.org/6020 - http://marc.info/?l=bugtraq&m=97535202912588&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5640 - http://marc.info/?l=bugtraq&m=97603879517777&w=2
CVE ID: CVE-2001-0300 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2000-12/0434.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/5804 - http://www.kb.cert.org/vuls/id/610904
CVE ID: CVE-2001-0301 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/linux/redhat/2001-q1/0056.html - http://www.securityfocus.com/bid/2377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6105 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0264.html - http://www.osvdb.org/1762 - http://www.analog.cx/security2.html - http://www.debi
m/archives/bugtraq/2001-02/0264.html - http://www.osvdb.org/1762 - http://www.analog.cx/security2.html - http://www.debian.org/security/2001/dsa-033
CVE ID: CVE-2001-0302 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html - http://www.securityfocus.com/bid/2381
CVE ID: CVE-2001-0303 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: tstisapi.dll in Pi3Web 1.0.1 web server allows remote attackers to determine the physical path of the server via a URL that requests a non-existent file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0316.html - http://www.securityfocus.com/bid/2381
CVE ID: CVE-2001-0304 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98229372610440&w=2 - http://www.securityfocus.com/bid/2384
CVE ID: CVE-2001-0305 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0324.html - http://www.securityfocus.com/bid/2385
CVE ID: CVE-2001-0306 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2386 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0332.html
CVE ID: CVE-2001-0307 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bajie HTTP JServer 0.78, and other versions before 0.80, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request for a CGI program that does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://www.geocities.com/gzhangx/websrv/docs/security.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html
CVE ID: CVE-2001-0308 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... (modified ..) to access the file that was created for the program. Additional Analyst Notes: - CVE Program Container: References: - http://www.geocities.com/gzhangx/websrv/docs/security.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0314.html - http://www.securityfocus.com/bid/2388
CVE ID: CVE-2001-0309 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: inetd in Red Hat 6.2 does not properly close sockets for internal services such as chargen, daytime, echo, etc., which allows remote attackers to cause a denial of service via a series of connections to the internal services. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6380 - http://www.redhat.com/support/errata/RHSA-2001-006.html
CVE ID: CVE-2001-0310 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: sort in FreeBSD 4.1.1 and earlier, and possibly other operating systems, uses predictable temporary file names and does not properly handle when the temporary file already exists, which causes sort to crash and possibly impacts security-sensitive scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6038 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:13.sort.asc
CVE ID: CVE-2001-0311 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/hp/2001-q1/0022.html - http://archives.neohapsis.com/archives/hp/2001-q1/0023.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6434 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0102-142
CVE ID: CVE-2001-0312 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-01/0446.html
CVE ID: CVE-2001-0313 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Borderware Firewall Server 6.1.2 allows remote attackers to cause a denial of service via a ping to the broadcast address of the public network on which the server is placed, which causes the server to continuously send pings (echo requests) to the network. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98053139231392&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6004
CVE ID: CVE-2001-0314 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in www.tol module in America Online (AOL) 5.0 may allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long URL in a link. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6009 - http://marc.info/?l=bugtraq&m=98053366805491&w=2
CVE ID: CVE-2001-0315 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: The locking feature in mIRC 5.7 allows local users to bypass the password mechanism by modifying the LockOptions registry key. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98053777917287&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6013
CVE ID: CVE-2001-0316 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.4 and 2.2 allows local users to read kernel memory and possibly gain privileges via a negative argument to the sysctl call. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-013.html - http://www.osvdb.org/6017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6079 - http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt - http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html - http://www.securityfocus.com/bid/2364
CVE ID: CVE-2001-0317 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in ptrace in Linux kernel 2.4 and 2.2 allows local users to gain privileges by using ptrace to track and modify a running setuid process. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6080 - http://www.caldera.com/support/security/advisories/CSSA-2001-009.0.txt - http://archives.neohapsis.com/archives/bugtraq/2001-02/0267.html
CVE ID: CVE-2001-0318 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ProFTPD 1.2.0rc2 may allow attackers to execute arbitrary commands by shutting down the FTP server while using a malformed working directory (cwd). Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-021.php3 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6433 - http://marc.info/?l=bugtraq&m=97916525715657&w=2 - http://archives.neohapsis.com/archives/bu
.com/vulnerabilities/6433 - http://marc.info/?l=bugtraq&m=97916525715657&w=2 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0117.html - http://www.debian.org/security/2001/dsa-029
CVE ID: CVE-2001-0319 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability. Additional Analyst Notes: - CVE Program Container: References: - http://www-4.ibm.com/software/webservers/commerce/netcomletter.html - http://archives.neohapsis.com/archives/bugtraq/2001-02/0072.html - http://www.securityfocus.com/bid/2350 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6067
CVE ID: CVE-2001-0320 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0425.html
CVE ID: CVE-2001-0321 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0214.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6512
CVE ID: CVE-2001-0322 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes an object that is associated with the browser window object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2202 - http://marc.info/?l=bugtraq&m=97958685100219&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/5938
CVE ID: CVE-2001-0323 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ICMP path MTU (PMTU) discovery feature in various UNIX systems allows remote attackers to cause a denial of service by spoofing "ICMP Fragmentation needed but Don't Fragment (DF) set" packets between two target hosts, which could cause one host to lower its MTU when transmitting to the other host. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5975 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://marc.info/?l=bugtraq&m
bilities/5975 - http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html - http://marc.info/?l=bugtraq&m=97958349623450&w=2 - http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
CVE ID: CVE-2001-0324 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 98 and Windows 2000 Java clients allow remote attackers to cause a denial of service via a Java applet that opens a large number of UDP sockets, which prevents the host from establishing any additional UDP connections, and possibly causes a crash. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/win2ksecadvice/2001-q1/0060.html - http://www.securityfocus.com/bid/2340
CVE ID: CVE-2001-0325 State: PUBLISHED Published: 2001-04-04T04:00:00 Last Updated: 2024-08-08T04:14:07.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in QNX RTP 5.60 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large number of arguments to the stat command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2342 - http://archives.neohapsis.com/archives/bugtraq/2001-02/0031.html
CVE ID: CVE-2001-0326 State: PUBLISHED Published: 2001-05-07T04:00:00 Last Updated: 2024-08-08T04:14:07.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Java Virtual Machine (JVM ) for Oracle 8.1.7 and Oracle Application Server 9iAS Release 1.0.2.0.1 allows remote attackers to read arbitrary files via the .jsp and .sqljsp file extensions when the server is configured to use the <<ALL FILES>> FilePermission. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0255.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6438 - http://www.osvdb.org/5706
CVE ID: CVE-2001-0327 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html - http://www.atstake.com/research/advisories/2001/a041601-1.txt - http://www.kb.cert.org/vuls/id/276
e/iwsalert4.16.html - http://www.atstake.com/research/advisories/2001/a041601-1.txt - http://www.kb.cert.org/vuls/id/276767 - http://www.osvdb.org/5704