Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1084 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to embed Javascript in a request for a .JSP, .shtml, .jsp10, .jrun, or .thtml file that does not exist, which causes the Javascript to be inserted into an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6793 - http://archive.cert.uni-stuttgart.de/archive/bugtraq/2001/07/msg00021.html - http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Fu
-stuttgart.de/archive/bugtraq/2001/07/msg00021.html - http://www.macromedia.com/v1/handlers/index.cfm?ID=21498&Method=Full - http://www.osvdb.org/1891 - http://www.securityfocus.com/bid/2983 - http://www.kb.cert.org/vuls/id/654643
CVE ID: CVE-2001-1085 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6809 - http://www.securityfocus.com/archive/1/195022 - http://www.securityfocus.com/bid/2984
CVE ID: CVE-2001-1086 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allows remote attackers to gain unauthorized access to the X display via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6808 - http://online.securityfocus.com/archive/1/195008 - http://www.securityfocus.com/archive/1/194907 - http://www.securityfocus.com/bid/2985
CVE ID: CVE-2001-1087 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the config.http.tunnel.allow_ports option on NetCache devices is set to +all, which allows remote attackers to connect to arbitrary ports on remote systems behind the device. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6807 - http://www.securityfocus.com/bid/2990 - http://www.securityfocus.com/archive/1/195176
CVE ID: CVE-2001-1088 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when the "Reply-To" address is different than the "From" address, which could allow an untrusted remote attacker to spoof legitimate addresses and intercept email from the client that is intended for another user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/188752 - https://exchange.xforce.ibmclo
s: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/188752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6655 - http://www.securityfocus.com/bid/2823 - http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq234241
CVE ID: CVE-2001-1089 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: libnss-pgsql in nss-pgsql 0.9.0 and earlier allows remote attackers to execute arbitrary SQL queries by inserting SQL code into an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/213331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7111 - http://www.securityfocus.com/bid/3314
CVE ID: CVE-2001-1090 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: nss_postgresql 0.6.1 and before allows a remote attacker to execute arbitrary SQL queries by inserting SQL code into an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3315 - http://www.securityfocus.com/archive/1/213331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7111
CVE ID: CVE-2001-1091 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) dump and (2) dump_lfs commands in NetBSD 1.4.x through 1.5.1 do not properly drop privileges, which could allow local users to gain privileges via the RCMD_CMD environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7037 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-014.txt.asc
CVE ID: CVE-2001-1092 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: msgchk in Digital UNIX 4.0G and earlier allows a local user to read the first line of arbitrary files via a symlink attack on the .mh_profile file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7102 - http://www.securityfocus.com/archive/1/213238 - http://www.kb.cert.org/vuls/id/440539 - http://www.securityfocus.com/bid/3320
CVE ID: CVE-2001-1093 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in msgchk in Digital UNIX 4.0G and earlier allows local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7101 - http://www.securityfocus.com/bid/3311 - http://www.securityfocus.com/archive/1/213238
CVE ID: CVE-2001-1094 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetOp School 1.5 allows local users to bypass access restrictions on the administration version by logging into the student version, closing the student version, then starting the administration version. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7120 - http://www.securityfocus.com/bid/3321 - http://www.securityfocus.com/archive/1/213516
CVE ID: CVE-2001-1095 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in uuq in AIX 4 could allow local users to execute arbitrary code via a long -r parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5469 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY24231&apar=only - http://archives.neohapsis.com/archives/aix/2001-q4/0000.html
CVE ID: CVE-2001-1096 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in muxatmd in AIX 4 allows an attacker to cause a core dump and possibly execute code. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5470 - http://archives.neohapsis.com/archives/aix/2001-q4/0000.html
CVE ID: CVE-2001-1097 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco routers and switches running IOS 12.0 through 12.2.1 allows a remote attacker to cause a denial of service via a flood of UDP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/199558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6913 - http://marc.info/?l=bugtraq&m=99749327219189&w=2 - http://www.securityfocus.com/bid/3096
CVE ID: CVE-2001-1098 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:44:07.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX firewall manager (PFM) 4.3(2)g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7265 - http://www.kb.cert.org/vuls/id/639507 - http://www.securityfocus.com/bid/3419 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0071.html
CVE ID: CVE-2001-1099 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending an email with an attachment containing malicious content, which includes the path in the rejection notice. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/212724 - http://www.securityfocus.com/bid/3305 - http://www.securityfocus.com/archive/1/213762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7093
CVE ID: CVE-2001-1100 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: sendmessage.cgi in W3Mail 1.0.2, and possibly other CGI programs, allows remote attackers to execute arbitrary commands via shell metacharacters in any field of the 'Compose Message' page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3673 - http://www.securityfocus.com/archive/1/218921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7230 - http://www.w3mail.org/ChangeLog
CVE ID: CVE-2001-1101 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Log Viewer function in the Check Point FireWall-1 GUI for Solaris 3.0b through 4.1 SP2 does not check for the existence of '.log' files when saving files, which allows (1) remote authenticated users to overwrite arbitrary files ending in '.log', or (2) local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/212826 - http://www.securityfocus.com/bid/3303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7095
CVE ID: CVE-2001-1102 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7094 - http://www.securityfocus.com/archive/1/212824
CVE ID: CVE-2001-1103 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T04:44:07.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP Voyager ActiveX control before 8.0, when it is marked as safe for scripting (the default) or if allowed by the IObjectSafety interface, allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/320944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7119
CVE ID: CVE-2001-1104 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/199632 - http://www.securityfocus.com/bid/3098
CVE ID: CVE-2001-1105 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client authentication and gain access to sensitive data by logging in after an initial failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/SSL-J-pub.html - http://www.securityfocus.com/bid/3329 - http://www.ciac.org/ciac/bulletins/l-141.shtml - http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.S
- http://www.ciac.org/ciac/bulletins/l-141.shtml - http://www.rsasecurity.com/products/bsafe/bulletins/BSAFE_SSL-J_3.x.SecurityBulletin.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7112
CVE ID: CVE-2001-1106 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T04:44:07.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Sambar Server 5 and earlier uses a symmetric key that is compiled into the binary program for encrypting passwords, which could allow local users to break all user passwords by cracking the key or modifying a copy of the sambar program to call the decryption procedure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3095 - http://www.securityfocus.com/archive/1/199418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6909
CVE ID: CVE-2001-1107 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: SnapStream PVS 1.2a stores its passwords in plaintext in the file SSD.ini, which could allow a remote attacker to gain privileges on the server. Additional Analyst Notes: - CVE Program Container: References: - http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html - http://www.securityfocus.com/bid/3101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6917
CVE ID: CVE-2001-1108 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL. Additional Analyst Notes: - CVE Program Container: References: - http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html - http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6917 - http://www.securityfocus.com/bid/3100 - http://www.osvdb.org/2080
CVE ID: CVE-2001-1109 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.eftp.org/releasehistory.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7113 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7114 - http://www.securityfocus.com/bid/3331 - http://www.securityfocus.com/archive/1/213647 - http://www.securityfo
ies/7114 - http://www.securityfocus.com/bid/3331 - http://www.securityfocus.com/archive/1/213647 - http://www.securityfocus.com/bid/3333
CVE ID: CVE-2001-1110 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: EFTP 2.0.7.337 allows remote attackers to obtain NETBIOS credentials by requesting information on a file that is in a network share, which causes the server to send the credentials to the host that owns the share, and allows the attacker to sniff the connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/213647
CVE ID: CVE-2001-1111 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: EFTP 2.0.7.337 stores user passwords in plaintext in the eftp2users.dat file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7116 - http://www.securityfocus.com/archive/1/213647 - http://www.securityfocus.com/bid/3332
CVE ID: CVE-2001-1112 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in EFTP 2.0.7.337 allows remote attackers to execute arbitrary code by uploading a .lnk file containing a large number of characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7115 - http://www.securityfocus.com/archive/1/213647 - http://www.securityfocus.com/bid/3330
CVE ID: CVE-2001-1113 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TrollFTPD 1.26 and earlier allows local users to execute arbitrary code by creating a series of deeply nested directories with long names, then running the ls -R (recursive) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3174 - ftp://ftp.trolltech.com/freebies/ftpd/troll-ftpd-1.27.tar.gz - http://www.securityfocus.com/archive/1/203874 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6974
CVE ID: CVE-2001-1114 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: book.cgi in NetCode NC Book 0.2b allows remote attackers to execute arbitrary commands via shell metacharacters in the "current" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6986 - http://www.securityfocus.com/archive/1/204094
CVE ID: CVE-2001-1115 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: generate.cgi in SIX-webboard 2.01 and before allows remote attackers to read arbitrary files via a dot dot (..) in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/204053 - http://www.securityfocus.com/bid/3175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6975
CVE ID: CVE-2001-1116 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6948 - http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=IND0108&L=NTBUGTRAQ&F=P&S=&P=71 - http://www.osvdb.org/5453 - http://www.securityfocus.com/bid/3140 - http://ntbugtr
&A2=IND0108&L=NTBUGTRAQ&F=P&S=&P=71 - http://www.osvdb.org/5453 - http://www.securityfocus.com/bid/3140 - http://ntbugtraq.ntadvice.com/default.asp?pid=36&sid=1&A2=ind0108&L=ntbugtraq&F=P&S=&P=724
CVE ID: CVE-2001-1117 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: LinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by connecting to the router and viewing the HTML source for (1) index.htm and (2) Password.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/201390 - http://www.securityfocus.com/bid/3141 - http://www.osvdb.org/5467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6949 - http://www.osvdb.org/1920 - http://www.securityf
.org/5467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6949 - http://www.osvdb.org/1920 - http://www.securityfocus.com/archive/1/203302 - ftp://ftp.linksys.com/pub/befsr41/befsr-fw1402.zip
CVE ID: CVE-2001-1118 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: A module in Roxen 2.0 before 2.0.92, and 2.1 before 2.1.264, does not properly decode UTF-8, Mac and ISO-2202 encoded URLs, which could allow a remote attacker to execute arbitrary commands or view arbitrary files via an encoded URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6937 - http://download.roxen.com/2.0/patch/security-notice.html - http://www.securityfocus.com/archive/1/201499 - http://www.securityfocus.c
ad.roxen.com/2.0/patch/security-notice.html - http://www.securityfocus.com/archive/1/201499 - http://www.securityfocus.com/archive/1/201476
CVE ID: CVE-2001-1119 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T04:44:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3148 - http://www.novell.com/linux/security/advisories/2001_025_xmcd_txt.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6941 - http://www.kb.cert.org/vuls/id/105347
CVE ID: CVE-2001-1120 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6839 - http://www.securityfocus.com/archive/1/196452 - http://www.allaire.com/handlers/index.cfm?id=21566 - http://www.kb.cert.org/vuls/id/135531
CVE ID: CVE-2001-1121 State: REJECTED Published: 2002-06-25T04:00:00 Last Updated: 2022-08-17T03:00:22 Description: No description available.
CVE ID: CVE-2001-1122 State: PUBLISHED Published: 2002-03-15T05:00:00 Last Updated: 2024-08-08T04:44:07.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows NT 4.0 SP 6a allows a local user with write access to winnt/system32 to cause a denial of service (crash in lsass.exe) by running the NT4ALL exploit program in 'SPECIAL' mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6943 - http://www.securityfocus.com/archive/1/201722