Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-0328 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/8044 - http://www.securitytracker.com/id/1033181 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922 - http://www.securityfocus.com/bid/2682 -
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4922 - http://www.securityfocus.com/bid/2682 - http://www.cert.org/advisories/CA-2001-09.html - ftp://patches.sgi.com/support/free/security/advisories/20030201-01-P - http://securityreason.com/securityalert/57 - https://support.f5.com/csp/article/K19063943?utm_source=f5support&amp%3Butm_medium=RSS
CVE ID: CVE-2001-0329 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) the Bugzilla_login cookie in post_bug.cgi, or (2) the who parameter in process_bug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/projects/bugzilla/security2_12.html - http://www.securityfocus.com/bid/1199 - http://www.atstake.com/research/advisories/2001/a043001-1.txt
CVE ID: CVE-2001-0330 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.10 allows remote attackers to access sensitive information, including the database username and password, via an HTTP request for the globals.pl file, which is normally returned by the web server without being executed. Additional Analyst Notes: - CVE Program Container: References: - http://www.atstake.com/research/advisories/2001/a043001-1.txt - http://www.securityfocus.com/bid/2671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6489
CVE ID: CVE-2001-0331 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-29T15:50:57.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Embedded Support Partner (ESP) daemon (rpc.espd) in IRIX 6.5.8 and earlier allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.osvdb.org/1822 - http://www.kb.cert.org/vuls/id/258632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6502 - ftp://patches.sgi.com/support/free/security/advisories/20010501-01-P - http://xforce.iss.net/alerts/advise76.php - http://www.securityfocus.com/bid/2714
CVE ID: CVE-2001-0332 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and GetObject, aka a variant of the "Frame Domain Verification" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 - http://marc.
ontainer: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 - http://marc.info/?l=bugtraq&m=98609031517525&w=2
CVE ID: CVE-2001-0333 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IIS 5.0 and earlier allows remote attackers to execute arbitrary commands by encoding .. (dot dot) and "\" characters twice. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1051 - http://www.cert.org/advisories/CA-2001-12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6534 - https://oval.cisec
www.cert.org/advisories/CA-2001-12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6534 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A37 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A78 - http://www.securityfocus.com/bid/2708 - http://marc.info/?l=bugtraq&m=98992056521300&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1018
CVE ID: CVE-2001-0334 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP service in IIS 5.0 and earlier allows remote attackers to cause a denial of service via a wildcard sequence that generates a long string when it is expanded. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6535
CVE ID: CVE-2001-0335 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP service in IIS 5.0 and earlier allows remote attackers to enumerate Guest accounts in trusted domains by preceding the username with a special sequence of characters. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6545 - http://www.securityfocus.com/bid/2719
CVE ID: CVE-2001-0336 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft MS00-060 patch for IIS 5.0 and earlier introduces an error which allows attackers to cause a denial of service via a malformed request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6858 - http://www.osvdb.org/5693
CVE ID: CVE-2001-0337 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft MS01-014 and MS01-016 patches for IIS 5.0 and earlier introduce a memory leak which allows attackers to cause a denial of service via a series of requests. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-026
CVE ID: CVE-2001-0338 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and earlier does not properly validate digital certificates when Certificate Revocation List (CRL) checking is enabled, which could allow remote attackers to spoof trusted web sites, aka the "Server certificate validation vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6555 - http://www.securityfocus.com/bid/2735 - http://www.ciac.org/cia
ps://exchange.xforce.ibmcloud.com/vulnerabilities/6555 - http://www.securityfocus.com/bid/2735 - http://www.ciac.org/ciac/bulletins/l-087.shtml
CVE ID: CVE-2001-0339 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and earlier allows remote attackers to display a URL in the address bar that is different than the URL that is actually being displayed, which could be used in web site spoofing attacks, aka the "Web page spoofing vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-027 - http://www.osvdb.org/5694 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1096 - http://ww
osvdb.org/5694 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1096 - http://www.securityfocus.com/bid/2737 - http://www.ciac.org/ciac/bulletins/l-087.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6556
CVE ID: CVE-2001-0340 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: An interaction between the Outlook Web Access (OWA) service in Microsoft Exchange 2000 Server and Internet Explorer allows attackers to execute malicious script code against a user's mailbox via a message attachment that contains HTML code, which is executed automatically. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/l-091.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6652 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-030
CVE ID: CVE-2001-0341 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/577 - http://www.securityfocus.com/bid/2906 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-035 - http://marc.info/?l=bugtraq&m=99348216322147&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6730
CVE ID: CVE-2001-0344 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL query method in Microsoft SQL Server 2000 Gold and 7.0 using Mixed Mode allows local database users to gain privileges by reusing a cached connection of the sa administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6684 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71 - http://www.ciac.org/ciac/bulletins/l-095.
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A71 - http://www.ciac.org/ciac/bulletins/l-095.shtml
CVE ID: CVE-2001-0345 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 telnet service allows attackers to prevent idle Telnet sessions from timing out, causing a denial of service by creating a large number of idle sessions. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6667 - http://www.securityfocus.com/bid/2843
CVE ID: CVE-2001-0346 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Handle leak in Microsoft Windows 2000 telnet service allows attackers to cause a denial of service by starting a large number of sessions and terminating them. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6668
CVE ID: CVE-2001-0347 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information disclosure vulnerability in Microsoft Windows 2000 telnet service allows remote attackers to determine the existence of user accounts such as Guest, or log in to the server without specifying the domain name, via a malformed userid. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - http://www.ciac.org/ciac/bulletins/l-092.shtml - http://www.osvdb.org/5686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6665 - h
g/ciac/bulletins/l-092.shtml - http://www.osvdb.org/5686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6665 - http://www.securityfocus.com/bid/2847
CVE ID: CVE-2001-0348 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 telnet service allows attackers to cause a denial of service (crash) via a long logon command that contains a backspace. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - http://www.ciac.org/ciac/bulletins/l-092.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/6666 - http://www.securityfocus.com/bid/2838 - http://razor.bindview.com/publish/advisories/adv_mstelnet.html
CVE ID: CVE-2001-0349 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:14:07.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the first of two variants of this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - http://www.kb.cert.org/vuls/id/587587 - http://www.securityfocus.co
s/security-updates/securitybulletins/2001/ms01-031 - http://www.kb.cert.org/vuls/id/587587 - http://www.securityfocus.com/bid/2849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6664
CVE ID: CVE-2001-0350 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:14:07.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creating a named pipe with the predictable name and associating a malicious program with it, the second of two variants of this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6664
CVE ID: CVE-2001-0351 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 2000 telnet service allows a local user to make a certain system call that allows the user to terminate a Telnet session and cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-031 - http://www.ciac.org/ciac/bulletins/l-092.shtml - http://www.securityfocus.com/bid/2846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6669
CVE ID: CVE-2001-0352 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:14:07.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or (2) ap128bWepKeyValue in the ap128bWEPKeyTable in the Symbol MIB. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6232
CVE ID: CVE-2001-0353 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6718 - http://www.cert.org/advisories/CA-2001-15.html - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/206 - http://xforce.iss.net/alerts/advise80.php - http://www.securityfocus.com/bid/2894
CVE ID: CVE-2001-0354 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: TheNet CheckBO 1.56 allows remote attackers to cause a denial of service via a flood of characters to the TCP ports which it is listening on. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2634 - http://www.securityfocus.com/archive/1/178061
CVE ID: CVE-2001-0355 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Groupwise 5.5 (sp1 and sp2) allows a remote user to access arbitrary files via an implementation error in Groupwise system policies. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98185226715517&w=2
CVE ID: CVE-2001-0357 State: PUBLISHED Published: 2001-07-27T04:00:00 Last Updated: 2024-08-08T04:14:07.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6242 - http://marc.info/?l=bugtraq&m=98433523520344&w=2
CVE ID: CVE-2001-0358 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Sierra Half-Life build 1573 and earlier allow remote attackers to execute arbitrary code via (1) a long map command, (2) a long exec command, or (3) long input in a configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6221 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6218
CVE ID: CVE-2001-0359 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6220 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0111.html
CVE ID: CVE-2001-0360 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. (dot dot) attack in the helpon parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6216 - http://www.securityfocus.com/bid/2471 - http://archives.neohapsis.com/archives/bugtraq/2001-03/0124.html
CVE ID: CVE-2001-0361 State: PUBLISHED Published: 2001-09-18T04:00:00 Last Updated: 2024-08-08T04:14:07.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2344 - http://www.osvdb.org/2116 - http://www.debian.org/security/2001/dsa-027 - http://www.debian.org/security/2001/dsa-023 - https://exchange.xforce.ibmcloud.com/vulner
an.org/security/2001/dsa-027 - http://www.debian.org/security/2001/dsa-023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6082 - http://www.ciac.org/ciac/bulletins/l-047.shtml - http://www.debian.org/security/2001/dsa-086 - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:24.ssh.asc - http://marc.info/?l=bugtraq&m=98158450021686&w=2 - http://www.novell.com/linux/security/advisories/adv004_ssh.html
CVE ID: CVE-2001-0364 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6241 - http://marc.info/?l=bugtraq&m=98467799732241&w=2
CVE ID: CVE-2001-0365 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98503741910995&w=2 - http://www.securityfocus.com/bid/2490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6262
CVE ID: CVE-2001-0366 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T04:14:07.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: saposcol in SAP R/3 Web Application Server Demo before 1.5 trusts the PATH environmental variable to find and execute the expand program, which allows local users to obtain root access by modifying the PATH to point to a Trojan horse expand program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2662 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6487 - http://www.securityfocus.com/archive/1/180498 - ftp://ftp.sap.com/pub/linuxlab/saptools/README.saposcol
CVE ID: CVE-2001-0367 State: PUBLISHED Published: 2001-05-24T04:00:00 Last Updated: 2024-08-08T04:14:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mirabilis ICQ WebFront Plug-in ICQ2000b Build 3278 allows a remote attacker to create a denial of service via HTTP URL requests containing a large number of % characters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=98847544303438&w=2 - http://www.securityfocus.com/bid/2664