Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1444 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kerberos Telnet protocol, as implemented by KTH Kerberos IV and Kerberos V (Heimdal), does not encrypt authentication and encryption options sent from the server, which allows remote attackers to downgrade authentication and encryption mechanisms via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://josefsson.org/ktelnet/kerberos-telnet.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10640 - http://www.kb.cert.org/vuls/id/774587
CVE ID: CVE-2001-1445 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:09.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the SMTP server in Lotus Domino 5.0 through 5.7 allows remote attackers to bypass mail relaying restrictions via crafted e-mail addresses in "RCPT TO" commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/176972 - http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21085603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6591
CVE ID: CVE-2001-1446 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Find-By-Content in Mac OS X 10.0 through 10.0.4 creates world-readable index files named .FBCIndex in every directory, which allows remote attackers to learn the contents of files in web accessible directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/177243 - http://archives.neohapsis.com/archives/bugtraq/2001-09/0085.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7103 - http://www.securityfocus.com/bid/3325
CVE ID: CVE-2001-1447 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetInfo Manager for Mac OS X 10.0 through 10.1 allows local users to gain root privileges by opening applications using the (1) "recent items" and (2) "services" menus, which causes the applications to run with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/m-007.shtml - http://archives.neohapsis.com/archives/bugtraq/2001-10/0130.html - http://www.kb.cert.org/vuls/id/945747 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html - http://www.secur
p://www.kb.cert.org/vuls/id/945747 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0121.html - http://www.securityfocus.com/bid/3439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7303
CVE ID: CVE-2001-1448 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the (1) mkuserproc, (2) mgrnt, and (3) mgdatasrvr.sc scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/157795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10616 - http://www.securityfocus.com/archive/1/246343
CVE ID: CVE-2001-1449 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8029 - http://www.mandriva.com/security/advisories?name=MDKSA-2001:077-2 - http://www.kb.cert.org/vuls/id/913704
CVE ID: CVE-2001-1450 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:10.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service (browser crash) via a crafted FTP URL such as "/.#./". Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/199408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10117 - http://cert.uni-stuttgart.de/archive/vuln-dev/2001/05/msg00029.html
CVE ID: CVE-2001-1451 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10431 - http://www.kb.cert.org/vuls/id/887393 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815 - http://www.securityfocus.com/bid/603
id/887393 - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815 - http://www.securityfocus.com/bid/6030
CVE ID: CVE-2001-1452 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS cache via spoofed DNS responses. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/3675 - http://www.securityfocus.com/bid/6791 - http://www.kb.cert.org/vuls/id/109475 - http://support.microsoft.com/default.aspx?scid=KB%3Ben-us%3Bq241352
CVE ID: CVE-2001-1453 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/123384 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6418 - http://www.securityfocus.com/archive/1/161917 - http://dev.mysql.com/doc/mysql/en/news-3-23-33.html
CVE ID: CVE-2001-1454 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6419 - http://www.securityfocus.com/archive/1/161917 - http://dev.mysql.com/doc/mysql/en/news-3-23-33.html - http://www.kb.cert.org/vuls/id/367320
CVE ID: CVE-2001-1455 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netegrity SiteMinder 3.6 through 4.5.1 allows remote attackers to bypass filtering via URLs containing Unicode characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6060 - http://www.kb.cert.org/vuls/id/837419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10497
CVE ID: CVE-2001-1456 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2001-25.html - http://www.kb.cert.org/vuls/id/206723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7088 - http://www.securityfocus.com/bid/3290 - ftp://patches.sgi.com/support/free/security/advisories/20011104-01-I
CVE ID: CVE-2001-1457 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/173050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10110 - http://www.kb.cert.org/vuls/id/229955
CVE ID: CVE-2001-1458 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences and a null character. Additional Analyst Notes: - CVE Program Container: References: - http://www.foundstone.com/index.htm?subnav=resources/navigation.htm&subcontent=/resources/advisories_template.htm%3Findexid%3D12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7287 - http://www.novell.com/coolsolutions/gwmag/features/a_we
12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7287 - http://www.novell.com/coolsolutions/gwmag/features/a_webaccess_security_gw.html - http://www.kb.cert.org/vuls/id/341539 - http://www.securityfocus.com/bid/3436 - http://support.novell.com/servlet/tidfinder/2960443 - http://online.securityfocus.com/archive/1/220667
CVE ID: CVE-2001-1459 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2917 - http://www.kb.cert.org/vuls/id/797027 - http://marc.info/?l=bugtraq&m=99324968918628&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6757
CVE ID: CVE-2001-1460 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/921547 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html - http://www.securityfocus.com/bid/3435 - http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7280
CVE ID: CVE-2001-1461 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/348040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7397 - http://www.securityfocus.com/bid/3461
CVE ID: CVE-2001-1462 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to cause the WebID agent to enter debug mode via a URL containing null characters, which may allow attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/609840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7399 - http://www.securityfocus.com/bid/3462
CVE ID: CVE-2001-1463 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote administration client for RhinoSoft Serv-U 3.0 sends the user password in plaintext even when S/KEY One-Time Password (OTP) authentication is enabled, which allows remote attackers to sniff passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7925 - http://www.kb.cert.org/vuls/id/279763 - http://securitytracker.com/id?1002882
CVE ID: CVE-2001-1464 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/403307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7928
CVE ID: CVE-2001-1465 State: PUBLISHED Published: 2005-04-21T04:00:00Z Last Updated: 2024-09-17T04:25:40.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: SurfControl SuperScout only filters packets containing both an HTTP GET request and a Host header, which allows local users to bypass filtering by fragmenting packets so that no packet contains both data elements. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/139315 - http://securitytracker.com/id?1001801
CVE ID: CVE-2001-1466 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vuln-dev/2001-q4/0967.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10111 - http://www.kb.cert.org/vuls/id/216227
CVE ID: CVE-2001-1467 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: mkpasswd in expect 5.2.8, as used by Red Hat Linux 6.2 through 7.0, seeds its random number generator with its process ID, which limits the space of possible seeds and makes it easier for attackers to conduct brute force password attacks. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-04/0173.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6382 - http://www.kb.cert.org/vuls/id/527736 - http://securitytracker.com/id?1001303 - http://www.securityfo
erabilities/6382 - http://www.kb.cert.org/vuls/id/527736 - http://securitytracker.com/id?1001303 - http://www.securityfocus.com/bid/2632 - http://archives.neohapsis.com/archives/bugtraq/2001-04/0192.html
CVE ID: CVE-2001-1468 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in checklogin.php in phpSecurePages 0.24 and earlier allows remote attackers to execute arbitrary PHP code by modifying the cfgProgDir parameter to reference a URL on a remote web server that contains the code. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1001408 - http://www.kb.cert.org/vuls/id/391347 - http://www.securityfocus.com/bid/2970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6774
CVE ID: CVE-2001-1469 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6449 - http://www.kb.cert.org/vuls/id/25309
CVE ID: CVE-2001-1470 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6472 - http://www.kb.cert.org/vuls/id/315308
CVE ID: CVE-2001-1471 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html - http://archives.neohapsis.com/archives/bugtraq/2001-08/01
er.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.html - http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 - http://www.kb.cert.org/vuls/id/920931 - http://www.securityfocus.com/bid/3167
CVE ID: CVE-2001-1472 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and gain administrative access via the viewemail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/201715 - http://www.securityfocus.com/bid/3142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6944 - http://www.kb.cert.org/vuls/id/314347
CVE ID: CVE-2001-1473 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls
o masquerade as the target. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/684820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/6603
CVE ID: CVE-2001-1474 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6604 - http://www.kb.cert.org/vuls/id/786900
CVE ID: CVE-2001-1475 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:10.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6490 - http://www.kb.cert.org/vuls/id/665372
CVE ID: CVE-2001-1476 State: PUBLISHED Published: 2005-04-21T04:00:00 Last Updated: 2024-08-08T04:58:11.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6490 - http://www.kb.cert.org/vuls/id/565052
CVE ID: CVE-2001-1477 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T04:58:11.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an ACL exists, which allows users to access services in a remote domain. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA00-08.jsp - https://exchange.xforce.ibmcloud.com/vulnerabilities/6326
CVE ID: CVE-2001-1478 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7573 - ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.34/CSSA-2001-SCO.34.txt
CVE ID: CVE-2001-1479 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/6K00S203FC.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7756 - http://www.securityfocus.com/bid/3763
CVE ID: CVE-2001-1480 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7333 - http://www.securityfocus.com/bid/3441 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00120.html - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/208&type=0&nav=sec.sba - http://www.securityfocus.com/advisories/3617
CVE ID: CVE-2001-1481 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T04:58:11.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readable, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3582 - http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html - http://www.securityfocus.com/archive/1/242375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7600